CVE-2021-33544 — G-Cam Ebc-2110 Firmware
HIGHCVE-2021-33544 is a high-severity (CVSS 7.2) OS Command Injection vulnerability in geutebrueck g-cam ebc-2110 firmware. 3 public exploit references exist, so weaponization risk is real. No vendor fix is recorded yet; mitigation options are listed below.
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
EPSS Exploitation Probability
Probability of exploitation in the next 30 days, from FIRST.org EPSS.
How urgent is this, really
CVE-2021-33544 by exploitation likelihood (EPSS) against impact (CVSS). In the shaded patch-first corner (EPSS 50%+, CVSS 7.0+).
Where this sits among everything scored
Of 394,803 CVEs with a current EPSS score, this one falls in the ≥ 90% band (highlighted). Counts from FIRST.org, log-scaled.
Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Affected Products
g-cam ebc-2110 firmwaregeutebrueckg-cam ebc-2111 firmwaregeutebrueckg-cam ebc-2112 firmwaregeutebrueckg-cam efd-2241 firmwaregeutebrueckg-cam efd-2250 firmwaregeutebrueckg-cam efd-2251 firmwaregeutebrueckResearch use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
Multiple camera devices by UDP Technology, Geutebrück and other vendors…
Multiple camera devices by UDP Technology, Geutebrück and other vendors…
Multiple camera devices by UDP Technology, Geutebrück and other vendors…
Detection & mitigation playbook
Vendor / applianceDetect
Inventory every geutebrueck g-cam ebc-2110 firmware deployment and check each version against the affected-products list above.
Remediation status
No patch has shipped for CVE-2021-33544 yet — track the geutebrueck g-cam ebc-2110 firmware advisory for a fixed release and apply the workarounds below in the meantime.
Mitigate without a patch
Stop passing untrusted input into the interpreter or shell: call the affected binary with an argument array rather than a composed command string, reject anything outside a strict allowlist of expected values, and run the component under an account that cannot reach beyond the work it legitimately does. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.
How to detect CVE-2021-33544
A community-maintained Nuclei template exists for this CVE. You can scan for it directly:
nuclei -id cve-2021-33544 -u https://target- Template
- Geutebruck - Remote Command Injection
- Severity
- high
- Impact
- Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands on the affected device, leading to unauthorized access, data theft, or further compromise of the network.
- Remediation
- Apply the latest security patches or firmware updates provided by Geutebruck to mitigate the vulnerability.
Template by ProjectDiscovery nuclei-templates (gy741), MIT licensed. View the full template. Scan only systems you are authorised to test.
Frequently Asked Questions
Is CVE-2021-33544 being exploited in your environment?
Detect and block the exploit chain at execution, on systems you cannot patch yet.