CVE:CVE-2020-16205
CNNVD:CNNVD-202008-267
Geutebrück G-Code EEC-2xxx等都是德国Geutebrück公司的产品。Geutebrück G-Code EEC-2xxx是一款模拟视频编码器模块。Geutebrück G-Cam EBC-21xx是一款EBC-21xx系列网络摄像机。Geutebrück G-Cam EFD-22xx是一款EFD-22xx系列网络摄像机。
使用1.12.0.25及之前版本以及limited 1.12.13.2版本和1.12.14.5版本固件的Geutebrück G-Cam和G-Code中存在操作系统命令注入漏洞。远程攻击者可借助特制的URL命令利用该漏洞以root权限执行命令。以下产品及版本受到影响：Geutebrück G-Code EEC-2xxx；G-Cam EBC-21xx；G-Cam EFD-22xx；G-Cam ETHC-22xx；G-Cam EWPC-22xx。
solution:Upgrade geutebrueck g-cam_ebc-2110_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ebc-2111_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_efd-2240_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_efd-2241_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_efd-2250_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ethc-2230_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ethc-2239_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ethc-2240_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ethc-2249_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-cam_ewpc-2270_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5; Upgrade geutebrueck g-code_eec-2400_firmware to a higher version than 1.12.0.25,1.12.13.2,1.12.14.5,and avoid the version 1.12.0.25,1.12.13.2,1.12.14.5