Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.
Credits
Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.