A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 | mitigation third party advisory us government resource |
http://www.securityfocus.com/bid/103474 | third party advisory vdb entry |