{"vulnerability": "CVE-2021-33550", "sightings": [{"uuid": "2471eded-1601-4762-b90c-5a5c452cd211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33550", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "45c3b3c0-4293-451c-b2c5-b312e5f1873b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33550", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:38.000000Z"}, {"uuid": "b54e3f16-16b1-4b82-9778-2e5226f2fbff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33550", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruck_cmdinject_cve_2021_335xx.rb", "content": "", "creation_timestamp": "2021-09-01T16:09:21.000000Z"}, {"uuid": "75565474-e5fd-4feb-b464-a89d7f1065d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33550", "type": "seen", "source": "https://t.me/cibsecurity/28738", "content": "\u203c CVE-2021-33550 \u203c\n\nMultiple camera devices by UDP Technology, Geutebr\u00c3\u0192\u00c2\u00bcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-13T22:14:59.000000Z"}, {"uuid": "500bcaae-65d4-4098-8268-97f71fce614c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33550", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruck_cmdinject_cve_2021_335xx.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Titouan Lazard\", \"Ibrahim Ayadhi\", \"S\\u00e9bastien Charbonnier\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder\\n          and exploits multiple authenticated arbitrary command execution vulnerabilities within\\n          the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx,\\n          EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions <= 1.12.0.27 as\\n          well as firmware versions 1.12.13.2 and 1.12.14.5. Successful exploitation results in\\n          remote code execution as the root user.\", \"disclosure_date\": \"2021-07-08\", \"fullname\": \"exploit/linux/http/geutebruck_cmdinject_cve_2021_335xx\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Geutebruck Multiple Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/geutebruck_cmdinject_cve_2021_335xx.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/geutebruck_cmdinject_cve_2021_335xx\", \"references\": [\"CVE-2021-33543\", \"CVE-2021-33544\", \"CVE-2021-33548\", \"CVE-2021-33550\", \"CVE-2021-33551\", \"CVE-2021-33552\", \"CVE-2021-33553\", \"CVE-2021-33554\", \"URL-https://www.geutebrueck.com/index.html\", \"URL-https://www.randorisec.fr/udp-technology-ip-camera-vulnerabilities/\", \"URL-https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"CVE-2021-33544 - certmngr.cgi\", \"CVE-2021-33548 - factory.cgi\", \"CVE-2021-33550 - language.cgi\", \"CVE-2021-33551 - oem.cgi\", \"CVE-2021-33552 - simple_reclistjs.cgi\", \"CVE-2021-33553 - testcmd.cgi\", \"CVE-2021-33554 - tmpapp.cgi\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:35.171220Z"}]}