Beveiligingsadvies

CVE-2025-12463

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-03 16:45:39
Laatst bijgewerkt 2025-11-03 20:51:37
Toegewezen door BLSOPS
CVSS-score 9.8
Status PUBLISHED

Beschrijving

An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the `Group` parameter in the `/uapi-cgi/viewer/Param.cgi` script. This has been confirmed on the EFD-2130 camera running firmware version 1.12.0.19.