A vulnerability was found in Geutebruck G-Code and G-Cam up to 1.12.0.25 and classified as critical. This issue affects some unknown processing of the component URL Handler. The manipulation with an unknown input leads to a os command injection vulnerability. Using CWE to declare the problem leads to CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.

The weakness was shared 01/17/2020. The identification of this vulnerability is CVE-2019-10956 since 04/08/2019. The attack may be initiated remotely. Required for exploitation is a simple authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/18/2020). The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfo

Vendor

• Geutebruck

Name

• G-Cam
• G-Code

Version

• 1.12.0.0
• 1.12.0.1
• 1.12.0.2
• 1.12.0.3
• 1.12.0.4
• 1.12.0.5
• 1.12.0.6
• 1.12.0.7
• 1.12.0.8
• 1.12.0.9
• 1.12.0.10
• 1.12.0.11
• 1.12.0.12
• 1.12.0.13
• 1.12.0.14
• 1.12.0.15
• 1.12.0.16
• 1.12.0.17
• 1.12.0.18
• 1.12.0.19
• 1.12.0.20
• 1.12.0.21
• 1.12.0.22
• 1.12.0.23
• 1.12.0.24
• 1.12.0.25

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion