CVE:CVE-2019-10957
CNNVD:CNNVD-201906-090
Geutebrück G-Code EEC-2xxx等都是德国Geutebrück公司的产品。Geutebrück G-Code EEC-2xxx是一款模拟视频编码器模块。Geutebrück G-Cam EBC-21xx是一款EBC-21xx系列网络摄像机。Geutebrück G-Cam EFD-22xx是一款EFD-22xx系列网络摄像机。
多款Geutebrück产品中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Geutebrück G-Code EEC-2xxx 1.12.0.25及之前版本；G-Cam EBC-21xx 1.12.0.25及之前版本；EFD-22xx 1.12.0.25及之前版本；ETHC-22xx 1.12.0.25及之前版本；EWPC-22xx 1.12.0.25及之前版本。
solution:Upgrade geutebrueck g-code_eec-2400_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ebc-2110_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ebc-2111_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_efd-2240_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_efd-2241_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_efd-2250_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ethc-2230_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ethc-2240_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ethc-2239_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ethc-2249_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]; Upgrade geutebrueck g-cam_ewpc-2270_firmware to a higher version than 1.12.0.25,and avoid the version (,1.12.0.25]