漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras
Vulnerability Description
An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the `Group` parameter in the `/uapi-cgi/viewer/Param.cgi` script. This has been confirmed on the EFD-2130 camera running firmware version 1.12.0.19.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Geutebruck G-Cam E-Series 安全漏洞
Vulnerability Description
Geutebruck G-Cam E-Series是日本Geutebruck公司的一系列网络摄像头。 Geutebruck G-Cam E-Series 1.12.0.19版本存在安全漏洞,该漏洞源于对Group参数验证不足,可能导致SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A