Full title: Geutebruck testaction.cgi Remote Command Execution Exploit 
Category: remote exploits
Platform: cgi
This Metasploit module exploits an authenticated arbitrary command execution vulnerability within the &#039;server&#039; GET parameter of the /uapi-cgi/testaction.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions &lt;= 1.12.0.25 as well as firmware versions 1.12.13.2 and 1.12.14.5 when the &#039;type&#039; GET parameter is set to &#039;ntp&#039;. Successful exploitation results in remote code execution as the root user.

# 0day.today @ http://0day.today/