CVE-2021-33549

CVE-2021-33549 is a stack-based buffer overflow vulnerability affecting multiple camera devices from vendors like UDP Technology and Geutebrück. This flaw, residing in the "action" parameter, could allow a highly privileged remote attacker to execute arbitrary code. With a CVSS score of 7.2 (HIGH) and an EPSS score indicating high exploitability, the vulnerability poses a significant risk due to its network-based attack vector and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists for remote command execution, and the vulnerability has garnered some community discussion and media coverage, including its association with Mirai DDoS malware variants.