Riskcovery

CVE-2021-33543

UDP Technology/Geutebrück camera devices: Authentication Bypass

State
Published
Severity
9.8 Critical
Published
Sep 13, 2021
Updated
Aug 3, 2024
Reserved
May 24, 2021

Read the record on cve.org

Description

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
E2 SeriesGeutebrück
  • EBC-21xx 1.12.13.2Affected
  • EBC-21xx 1.12.14.5Affected
  • EFD-22xx 1.12.13.2Affected
  • EFD-22xx 1.12.14.5Affected
  • ETHC-22xx 1.12.13.2Affected
  • ETHC-22xx 1.12.14.5Affected
  • EWPC-22xx 1.12.13.2Affected
  • EWPC-22xx 1.12.14.5Affected
  • EBC-21xx through 1.12.0.27Affected
  • EFD-22xx through 1.12.0.27Affected
  • ETHC-22xx through 1.12.0.27Affected
  • EWPC-22xx through 1.12.0.27Affected
Encoder G-CodeGeutebrück
  • EEC-2xx 1.12.13.2Affected
  • EEC-2xx 1.12.14.5Affected
  • EEN-20xx 1.12.13.2Affected
  • EEN-20xx 1.12.14.5Affected
  • EEC-2xx through 1.12.0.27Affected
  • EEN-20xx through 1.12.0.27Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.