RULE(RULE ID:321582)

Rule General Information
Release Date: 2018-08-06
Rule Name: Geutebruck Remote Command Execution Vulnerability (CVE-2018-7520)
Severity:
CVE ID:
Rule Protection Details
Description: An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords.
Impact: Successful exploitation of these vulnerabilities could lead to proxy network scans, access to a database, adding an unauthorized user to the system, full configuration download including passwords, and remote code execution.
Affected OS: Network Device, Solaris, FreeBSD, Windows, Mac OS, iOS, Other Unix, Linux, Others, Android
Reference: SecurityFocusBID:103474
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01
Solutions
Please replace the product with an unaffected version.