title: UDP Technology/Geutebrück camera devices: Authentication Bypass
description: Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
problem types: CWE-306 Missing Authentication for Critical Function
affected:
{
product: E2 Series
vendor: Geutebrück
versions:
status: affected, version: EBC-21xx 1.12.13.2
status: affected, version: EBC-21xx 1.12.14.5
status: affected, version: EFD-22xx 1.12.13.2
status: affected, version: EFD-22xx 1.12.14.5
status: affected, version: ETHC-22xx 1.12.13.2
status: affected, version: ETHC-22xx 1.12.14.5
status: affected, version: EWPC-22xx 1.12.13.2
status: affected, version: EWPC-22xx 1.12.14.5
lessThanOrEqual: 1.12.0.27, status: affected, version: EBC-21xx, versionType: custom
lessThanOrEqual: 1.12.0.27, status: affected, version: EFD-22xx, versionType: custom
lessThanOrEqual: 1.12.0.27, status: affected, version: ETHC-22xx, versionType: custom
lessThanOrEqual: 1.12.0.27, status: affected, version: EWPC-22xx, versionType: custom
}
{
product: Encoder G-Code
vendor: Geutebrück
versions:
status: affected, version: EEC-2xx 1.12.13.2
status: affected, version: EEC-2xx 1.12.14.5
status: affected, version: EEN-20xx 1.12.13.2
status: affected, version: EEN-20xx 1.12.14.5
lessThanOrEqual: 1.12.0.27, status: affected, version: EEC-2xx, versionType: custom
lessThanOrEqual: 1.12.0.27, status: affected, version: EEN-20xx, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]