9.8crit
CVE-2017-5173in critical feed1 exploit
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
29.6%
percentile 98%
Public exploits
1
Exploit-DB
Summary
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.
Exploit prediction (EPSS)
29.58% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-41360 Geutebruck 5.02024 G-Cam/EFD-2250 - 'testaction.cgi' Remote Command Execution (Metasploit) · webapps · 2017-02-15
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- n/a Geutebruck IP Cameras
Classification
- Weakness
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
- securityfocus.com /bid/96209 · vdb-entry, x_refsource_BID, x_transferred
- ics-cert.us-cert.gov /advisories/ICSA-17-045-02 · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/41360/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
Sources
- CVE List: CVE-2017-5173
- NVD: CVE-2017-5173
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.