by Kastro
Paper/Archive/CVE-2021-33543

CVE-2021-33543

Geutebrück E2 Series — UDP Technology/Geutebrück camera devices: Authentication Bypass

EPSS 81%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.6.996 × 2019.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

Affected

ProductAffectedFixed inSource
E2 SeriesEBC-21xx 1.12.13.2–CNA
E2 SeriesEBC-21xx 1.12.14.5–CNA
E2 SeriesEFD-22xx 1.12.13.2–CNA
E2 SeriesEFD-22xx 1.12.14.5–CNA
E2 SeriesETHC-22xx 1.12.13.2–CNA
E2 SeriesETHC-22xx 1.12.14.5–CNA
E2 SeriesEWPC-22xx 1.12.13.2–CNA
E2 SeriesEWPC-22xx 1.12.14.5–CNA
E2 SeriesEBC-21xx – 1.12.0.27–CNA
E2 SeriesEFD-22xx – 1.12.0.27–CNA
E2 SeriesETHC-22xx – 1.12.0.27–CNA
E2 SeriesEWPC-22xx – 1.12.0.27–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refrandorisec.fr/fr/udp-technology-ip-camera-vulnerabilitiesrefus-cert.cisa.gov/ics/advisories/icsa-21-208-03