Description (CNA)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Geutebrück / E2 Series | affected EBC-21xx 1.12.13.2; affected EBC-21xx 1.12.14.5; affected EFD-22xx 1.12.13.2; affected EFD-22xx 1.12.14.5; affected ETHC-22xx 1.12.13.2; affected ETHC-22xx 1.12.14.5; affected EWPC-22xx 1.12.13.2; affected EWPC-22xx 1.12.14.5; affected EBC-21xx through 1.12.0.27; affected EFD-22xx through 1.12.0.27; affected ETHC-22xx through 1.12.0.27; affected EWPC-22xx through 1.12.0.27 |
| Geutebrück / Encoder G-Code | affected EEC-2xx 1.12.13.2; affected EEC-2xx 1.12.14.5; affected EEN-20xx 1.12.13.2; affected EEN-20xx 1.12.14.5; affected EEC-2xx through 1.12.0.27; affected EEN-20xx through 1.12.0.27 |
CWE
CWE-121
References
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
ADP enrichment
No English description supplied.