CVE-2017-5174

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution.

Weakness

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Potential Mitigations

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/127.html
• https://cwe.mitre.org/data/definitions/665.html

References

• http://www.securityfocus.com/bid/96209
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
• https://www.exploit-db.com/exploits/41360/
• http://www.securityfocus.com/bid/96209
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
• https://www.exploit-db.com/exploits/41360/