CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2020-16205
High (7.2) in geutebrueck. EPSS 61% chance of exploitation in the next 30 days.
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
Severity
- EPSS
- 61% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- geutebrueck:g-cam_ebc-2110_firmware
- geutebrueck:g-cam_ebc-2111_firmware
- geutebrueck:g-cam_efd-2240_firmware
- geutebrueck:g-cam_efd-2241_firmware
- geutebrueck:g-cam_efd-2250_firmware
- geutebrueck:g-cam_ethc-2230_firmware
- geutebrueck:g-cam_ethc-2239_firmware
- geutebrueck:g-cam_ethc-2240_firmware
- geutebrueck:g-cam_ethc-2249_firmware
- geutebrueck:g-cam_ewpc-2270_firmware
- geutebrueck:g-code_eec-2400_firmware
References
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03