{"id":"CVE-2021-33543","state":"PUBLISHED","title":"UDP Technology/Geutebrück camera devices: Authentication Bypass","description":"Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.","publishedAt":"2021-09-13T17:55:32.000Z","updatedAt":"2024-08-03T23:50:43.139Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["Geutebrück E2 Series","Geutebrück Encoder G-Code"],"affected":[{"vendor":"Geutebrück","product":"E2 Series","versions":[{"version":"EBC-21xx 1.12.13.2","status":"affected"},{"version":"EBC-21xx 1.12.14.5","status":"affected"},{"version":"EFD-22xx 1.12.13.2","status":"affected"},{"version":"EFD-22xx 1.12.14.5","status":"affected"},{"version":"ETHC-22xx 1.12.13.2","status":"affected"},{"version":"ETHC-22xx 1.12.14.5","status":"affected"},{"version":"EWPC-22xx 1.12.13.2","status":"affected"},{"version":"EWPC-22xx 1.12.14.5","status":"affected"},{"version":"EBC-21xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EFD-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"ETHC-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EWPC-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"}]},{"vendor":"Geutebrück","product":"Encoder G-Code","versions":[{"version":"EEC-2xx 1.12.13.2","status":"affected"},{"version":"EEC-2xx 1.12.14.5","status":"affected"},{"version":"EEN-20xx 1.12.13.2","status":"affected"},{"version":"EEN-20xx 1.12.14.5","status":"affected"},{"version":"EEC-2xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EEN-20xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"}]}],"references":["https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/","https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T19:48:36.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/33xxx/CVE-2021-33543.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-33543","state":"PUBLISHED","datePublished":"2021-09-13T17:55:32.000Z","dateUpdated":"2024-08-03T23:50:43.139Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateReserved":"2021-05-24T00:00:00.000Z"},"containers":{"cna":{"title":"UDP Technology/Geutebrück camera devices: Authentication Bypass","descriptions":[{"lang":"en","value":"Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."}],"affected":[{"vendor":"Geutebrück","product":"E2 Series","versions":[{"version":"EBC-21xx 1.12.13.2","status":"affected"},{"version":"EBC-21xx 1.12.14.5","status":"affected"},{"version":"EFD-22xx 1.12.13.2","status":"affected"},{"version":"EFD-22xx 1.12.14.5","status":"affected"},{"version":"ETHC-22xx 1.12.13.2","status":"affected"},{"version":"ETHC-22xx 1.12.14.5","status":"affected"},{"version":"EWPC-22xx 1.12.13.2","status":"affected"},{"version":"EWPC-22xx 1.12.14.5","status":"affected"},{"version":"EBC-21xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EFD-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"ETHC-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EWPC-22xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"}]},{"vendor":"Geutebrück","product":"Encoder G-Code","versions":[{"version":"EEC-2xx 1.12.13.2","status":"affected"},{"version":"EEC-2xx 1.12.14.5","status":"affected"},{"version":"EEN-20xx 1.12.13.2","status":"affected"},{"version":"EEN-20xx 1.12.14.5","status":"affected"},{"version":"EEC-2xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"},{"version":"EEN-20xx","status":"affected","lessThanOrEqual":"1.12.0.27","versionType":"custom"}]}],"references":[{"url":"https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/","tags":["x_refsource_CONFIRM"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","dateUpdated":"2022-04-28T14:30:17.000Z","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c"},"credits":[{"lang":"en","value":"Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"info@cert.vde.com","ID":"CVE-2021-33543","STATE":"PUBLIC","TITLE":"UDP Technology/Geutebrück camera devices: Authentication Bypass"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"E2 Series","version":{"version_data":[{"version_affected":"<=","version_name":"EBC-21xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"EBC-21xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"EBC-21xx","version_value":"1.12.14.5"},{"version_affected":"<=","version_name":"EFD-22xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"EFD-22xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"EFD-22xx","version_value":"1.12.14.5"},{"version_affected":"<=","version_name":"ETHC-22xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"ETHC-22xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"ETHC-22xx","version_value":"1.12.14.5"},{"version_affected":"<=","version_name":"EWPC-22xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"EWPC-22xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"EWPC-22xx","version_value":"1.12.14.5"}]}},{"product_name":"Encoder G-Code","version":{"version_data":[{"version_affected":"<=","version_name":"EEC-2xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"EEC-2xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"EEC-2xx","version_value":"1.12.14.5"},{"version_affected":"<=","version_name":"EEN-20xx","version_value":"1.12.0.27"},{"version_affected":"=","version_name":"EEN-20xx","version_value":"1.12.13.2"},{"version_affected":"=","version_name":"EEN-20xx","version_value":"1.12.14.5"}]}}]},"vendor_name":"Geutebrück"}]}},"credit":[{"lang":"eng","value":"Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-306 Missing Authentication for Critical Function"}]}]},"references":{"reference_data":[{"name":"https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/","refsource":"CONFIRM","url":"https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"},{"name":"https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03","refsource":"CONFIRM","url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T23:50:43.139Z"}}]}}}