Back
CVE-2017-5173
CRITICAL
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.
Published: May 19, 2017
Modified: Jun 17, 2026
CWE-78
CWE-78
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| geutebrueck | ip_camera_g-cam_efd-2250_firmware | 1.11.0.12 |
GitHub Security Advisory GHSA-34rc-844x-w698
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in...
References (6)
- http://www.securityfocus.com/bid/96209 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02 Third Party Advisory, US Government Resource
- https://www.exploit-db.com/exploits/41360/ Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/96209 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02 Third Party Advisory, US Government Resource
- https://www.exploit-db.com/exploits/41360/ Exploit, Third Party Advisory, VDB Entry
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
29.58%
Top 2% most likely to be exploited
Threat Score
48.1 / 100
Data Sources
NVD
EPSS
GitHub