CVE-2017-5174

Опубликовано: 19 мая 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution.

Ссылки

http://www.securityfocus.com/bid/96209
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/41360/
http://www.securityfocus.com/bid/96209
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/41360/

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:geutebruck:ip_camera_g-cam_efd-2250_firmware:1.11.0.12:*:*:*:*:*:*:*

cpe:2.3:h:geutebruck:ip_camera_g-cam_efd-2250:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.38216

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-288

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5jcr-qmff-jph4