What’s Vulnerable › Vulnerabilities
CVE-2020-16205
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 61.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-08-14 · updated 2026-06-17
- Weakness: CWE-78
Description
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
Affected products
- Geutebrueck G-Cam Ebc-2110 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ebc-2111 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Efd-2240 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Efd-2241 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Efd-2250 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ethc-2230 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ethc-2239 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ethc-2240 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ethc-2249 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Cam Ewpc-2270 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
- Geutebrueck G-Code Eec-2400 Firmware: 1.12.0.25, 1.12.13.2, 1.12.14.5
References
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
Get alerted when CVE-2020-16205 or the next vulnerability affects your stack