CVE-2018-7532

Опубликовано: 22 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution.

Ссылки

http://www.securityfocus.com/bid/103474
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01
Mitigation
Third Party Advisory
US Government Resource
https://randorisec.fr/0day-anonymous-rce-on-geutebruck-ip-cameras-again/
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/103474
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01
Mitigation
Third Party Advisory
US Government Resource
https://randorisec.fr/0day-anonymous-rce-on-geutebruck-ip-cameras-again/
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:geutebrueck:g-cam\/efd-2250_firmware:1.12.0.4:*:*:*:*:*:*:*

cpe:2.3:h:geutebrueck:g-cam\/efd-2250:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:geutebrueck:topfd-2125_firmware:3.15.1:*:*:*:*:*:*:*

cpe:2.3:h:geutebrueck:topfd-2125:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11358

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-3wch-cp8h-4vh3