CVE-2019-10957
lowPriorität · verfolgen · 19EPSS 0.009 · 61. PerzentilEUUSEPSS · bewertet 2026-10-28
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationEBC-21xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEEC-2xxxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEFD-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationETHC-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEWPC-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.5–6.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- n/a Geutebruck IP Cameras≤ G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and priorenisa_euvdEU
- geutebrueck g-cam ebc-2110 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ebc-2110_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ebc-2111 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ebc-2111_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2240 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2240_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2241 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2241_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2250 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2250_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2230 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2230_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2239 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2239_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2240 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2240_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2249 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2249_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-19-155-03Geutebrück G-Cam and G-Code2019-06-04icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow remote code execution as root and remote code execution in the browser of the IP camera operator.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://ics-cert.us-cert.gov/advisories/ICSA-19-155-03cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-10957cnnvd
- https://www.geutebrueck.com/Patchcnnvd
- https://www.geutebrueck.com/en_EN.htmlcnnvd
- https://www.securityfocus.com/bid/108579cnnvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03cnnvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03enisa_euvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03Third Party AdvisoryUS Government Resourcenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan