Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-12463

Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras

Description

An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the `Group` parameter in the `/uapi-cgi/viewer/Param.cgi` script. This has been confirmed on the EFD-2130 camera running firmware version 1.12.0.19.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Guetebruck G-Cam

Default version status: unaffected

  • 1.12.0.19affected

References