CVE-2021-33543
9.8
CRITICAL · CVSS 3.1 · EPSS 81.3% (pctl 100)
Patch early
EPSS 81.3% — above the 10% action threshold.
Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 81.34% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-306 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2021-09-13 |
| Last modified | 2026-06-17 |
Affected (32)
| Vendor | Product |
|---|---|
| geutebrueck | g-cam ebc-2110 |
| geutebrueck | g-cam ebc-2110 firmware |
| geutebrueck | g-cam ebc-2111 |
| geutebrueck | g-cam ebc-2111 firmware |
| geutebrueck | g-cam ebc-2112 |
| geutebrueck | g-cam ebc-2112 firmware |
| geutebrueck | g-cam efd-2241 |
| geutebrueck | g-cam efd-2241 firmware |
| geutebrueck | g-cam efd-2250 |
| geutebrueck | g-cam efd-2250 firmware |
| geutebrueck | g-cam efd-2251 |
| geutebrueck | g-cam efd-2251 firmware |
| geutebrueck | g-cam ethc-2230 |
| geutebrueck | g-cam ethc-2230 firmware |
| geutebrueck | g-cam ethc-2239 |
| geutebrueck | g-cam ethc-2239 firmware |
| geutebrueck | g-cam ethc-2240 |
| geutebrueck | g-cam ethc-2240 firmware |
| geutebrueck | g-cam ethc-2249 |
| geutebrueck | g-cam ethc-2249 firmware |
| geutebrueck | g-cam ewpc-2270 |
| geutebrueck | g-cam ewpc-2270 firmware |
| geutebrueck | g-cam ewpc-2271 |
| geutebrueck | g-cam ewpc-2271 firmware |
| geutebrueck | g-cam ewpc-2275 |
| geutebrueck | g-cam ewpc-2275 firmware |
| geutebrueck | g-code eec-2400 |
| geutebrueck | g-code eec-2400 firmware |
| geutebrueck | g-code een-2010 |
| geutebrueck | g-code een-2010 firmware |
| geutebrueck | g-code een-2040 |
| geutebrueck | g-code een-2040 firmware |
References
→ the Explorer · watch your stack · NVD