Geutebrueck

Topfd-2125 Firmware

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2018-7524

  • EPSS 0.07%
  • Veröffentlicht 22.03.2018 18:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:17

A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system.

9.1

CVE-2018-7528

  • EPSS 0.15%
  • Veröffentlicht 22.03.2018 18:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:18

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.

9.8

CVE-2018-7532

Exploit
  • EPSS 11.36%
  • Veröffentlicht 22.03.2018 18:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:18

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution.

6.1

CVE-2018-7512

  • EPSS 0.09%
  • Veröffentlicht 22.03.2018 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:16

A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution.

7.5

CVE-2018-7516

  • EPSS 0.14%
  • Veröffentlicht 22.03.2018 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:16

A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans.

9.8

CVE-2018-7520

  • EPSS 0.3%
  • Veröffentlicht 22.03.2018 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:17

An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords.