Geutebruck G-Cam E-Series Cameras Unauthenticated SQL Injection Vulnerability
Vulnerability
A vulnerability allowing unauthenticated SQL injection has been identified in Geutebruck G-Cam E-Series Cameras. The issue arises in the 'Group' parameter of the '/uapi-cgi/viewer/Param.cgi' script. This vulnerability has been confirmed on the EFD-2130 camera with firmware version 1.12.0.19.
Impact
Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized database access or manipulation.
Added: Nov 3, 2025, 5:19 PM
Updated: Nov 3, 2025, 5:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.1exploitability
7.4remediation
0.0relevance
0.8threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.