CVE:CVE-2018-19007
CNNVD:CNNVD-201812-657
Geutebrück E2 Camera Series是德国Geutebrück公司的一款E2系列网络摄像头。
使用1.12.0.25之前版本固件的Geutebrück E2 Camera Series中的网络配置面板的DDNS配置存在操作系统命令注入漏洞。远程攻击者可利用该漏洞以root权限注入操作系统命令。
solution:Upgrade geutebrueck g-cam/efd-2251_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25); Upgrade geutebrueck g-cam/ewpc-2275_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25)