CVE-2021-33551
UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
CVE-2021-33551- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2021-20243
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
EUVD-2021-20243- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3672-644q-jcfr
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to...
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
GHSA-3672-644q-jcfr- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77, CWE-78
- Updated
- 2026-11-02
NVD
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
CVE-2021-33551- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- geutebrueck g-cam ebc-2110 firmware
- geutebrueck g-cam ebc-2111 firmware
- geutebrueck g-cam ebc-2112 firmware
- geutebrueck g-cam efd-2241 firmware
- geutebrueck g-cam efd-2250 firmware
- geutebrueck g-cam efd-2251 firmware
- geutebrueck g-cam ethc-2230 firmware
- geutebrueck g-cam ethc-2239 firmware
- geutebrueck g-cam ethc-2240 firmware
- geutebrueck g-cam ethc-2249 firmware
- geutebrueck g-cam ewpc-2270 firmware
- geutebrueck g-cam ewpc-2271 firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Geutebruck Multiple Remote Command Execution | 2021-07-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-33551 is a high vulnerability (CVSS 7.2) in Geutebrueck G-cam Ebc-2110 Firmware, published September 13, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 51.0%, the 98th percentile. No source names a fixed version.