CVE-2021-33554: UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 59.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-09-13 · updated 2026-06-17
Weakness: CWE-78

Description

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Affected products

Geutebrueck G-Cam Ebc-2110 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ebc-2111 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ebc-2112 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Efd-2241 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Efd-2250 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Efd-2251 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ethc-2230 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ethc-2239 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ethc-2240 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ethc-2249 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ewpc-2270 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ewpc-2271 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Cam Ewpc-2275 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Code Eec-2400 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Code Een-2010 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5
Geutebrueck G-Code Een-2040 Firmware: through 1.12.0.27; 1.12.13.2, 1.12.14.5

References

Get alerted when CVE-2021-33554 or the next vulnerability affects your stack