CVE-2017-5174

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Potential Mitigations

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/127.html
• https://cwe.mitre.org/data/definitions/665.html

References

• http://www.securityfocus.com/bid/96209
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
• https://www.exploit-db.com/exploits/41360/
• http://www.securityfocus.com/bid/96209
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
• https://www.exploit-db.com/exploits/41360/