CVE-2019-10956
highpriority · track · 30EPSS 0.027 · 86 %ileEUUSEPSS · scored 2026-10-28
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationEBC-21xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEEC-2xxxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEFD-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationETHC-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/ - MitigationEWPC-22xxcisa_csaf_ot
Geutebruck has also released a security advisory
https://portal.geutebrueck.com/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–9
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (22)
Products and version ranges known to be affected.
- n/a Geutebruck IP Cameras≤ G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and priorenisa_euvdEU
- geutebrueck g-cam ebc-2110 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ebc-2110_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ebc-2111 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ebc-2111_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2240 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2240_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2241 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2241_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam efd-2250 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_efd-2250_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2230 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2230_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2239 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2239_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2240 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2240_firmware:*:*:*:*:*:*:*:*
- geutebrueck g-cam ethc-2249 firmware≤ 1.12.0.25nvdUScpe:2.3:o:geutebrueck:g-cam_ethc-2249_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-19-155-03Geutebrück G-Cam and G-Code2019-06-04icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow remote code execution as root and remote code execution in the browser of the IP camera operator.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://ics-cert.us-cert.gov/advisories/ICSA-19-155-03cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-10956cnnvd
- https://www.geutebrueck.com/Patchcnnvd
- https://www.geutebrueck.com/en_EN.htmlcnnvd
- https://www.securityfocus.com/bid/108579cnnvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03cnnvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03enisa_euvd
- https://www.us-cert.gov/ics/advisories/ICSA-19-155-03Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan