ZeroHour

CVE-2019-10957

CVSS 3.1
4.8 medium
EPSS
<1%p59
Published
()
Modified
Description

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.

Vendors
geutebrueck
Products
g-code eec-2400 firmware, g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam efd-2240 firmware, g-cam efd-2241 firmware, g-cam efd-2250 firmware, g-cam ethc-2230 firmware, g-cam ethc-2240 firmware, g-cam ethc-2239 firmware, g-cam ethc-2249 firmware, g-cam ewpc-2270 firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.