CVE-2021-33549

CVE-2021-33549 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Titouan Lazard - RandoriSec, Ibrahim Ayadhi - RandoriSec, including a Metasploit module exploits/linux/http/geutebruck_instantrec_bof.

AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the 'action' parameter of Geutebruck instantrec.cgi, leading to remote code execution as root. It uses ROP gadgets to bypass memory protections and execute a payload.

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.