ID:6674 - Exploit for Missing Authentication for Critical Function in G-Cam E2 and G-Code - CVE-2021-33543

 
Main Vulnerability Database Exploits ID:6674 - Exploit for Missing Authentication for Critical Function in G-Cam E2 and G-Code - CVE-2021-33543

ID:6674 - Exploit for Missing Authentication for Critical Function in G-Cam E2 and G-Code - CVE-2021-33543

Published: September 1, 2021


Vulnerability identifier: #VU55386
Vulnerability risk: High
CVE-ID: CVE-2021-33543
CWE-ID: CWE-306
Exploitation vector: Remote access
Vulnerable software:
G-Cam E2
G-Code

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to default user authentication settings. A remote attacker can gain access to sensitive files and gain access to the target system.

This vulnerability affects the following devices:

  • E2 Series cameras – G-CAM
    • EBC-21xx
    • EFD-22xx
    • ETHC-22xx
    • EWPC-22xx
  • Encoder G-Code
    • EEC-2xx
    • EEN-20xx

Remediation

Install updates from vendor's website.