CVE-2021-33547

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Geutebrück	E2 Series	EBC-21xx 1.12.13.2; EBC-21xx 1.12.14.5; EFD-22xx 1.12.13.2; EFD-22xx 1.12.14.5; ETHC-22xx 1.12.13.2; ETHC-22xx 1.12.14.5; EWPC-22xx 1.12.13.2; EWPC-22xx 1.12.14.5; >= EBC-21xx, <= 1.12.0.27; >= EFD-22xx, <= 1.12.0.27; >= ETHC-22xx, <= 1.12.0.27; >= EWPC-22xx, <= 1.12.0.27
Geutebrück	Encoder G-Code	EEC-2xx 1.12.13.2; EEC-2xx 1.12.14.5; EEN-20xx 1.12.13.2; EEN-20xx 1.12.14.5; >= EEC-2xx, <= 1.12.0.27; >= EEN-20xx, <= 1.12.0.27

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party Advisory, US Government Resource
https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/Exploit, Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party Advisory, US Government Resource
https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/Exploit, Third Party Advisory

Timeline

Published: Sep 13, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-335487.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335497.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the act CVE-2021-33555.4A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/S CVE-2021-335507.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335517.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335527.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335537.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335547.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to CVE-2021-335557.5In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read CVE-2021-335576.1An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows CVE-2021-335587.5Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, l CVE-2021-335607.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att