CVE-2021-33543: Geutebrück and UDP Technology cameras expose files via missing authentication

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: high.

critical priorityCVSS 9.8 with no authentication or user interaction required, very high EPSS, public exploit code, and a large list of affected camera models make this an urgent exposure.

What it is

Multiple camera devices from UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files because of default user authentication settings. The flaw is a missing authentication check on a critical function, so anyone who can reach the device interface can read protected files. It matters because these are network-facing cameras that are often left on default configuration.

Impact

An attacker gains unauthenticated access to sensitive files on the device, which can enable manipulation of the device and denial of service. The CVSS vector rates confidentiality, integrity and availability impact as high.

Attack surface

Reachable over the network with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. Any host that can route to the camera's management interface can attempt it.

Exploitation

Not listed in CISA KEV, but EPSS is very high at 0.813 probability over 30 days (99.6th percentile), and a public reference is tagged Exploit, indicating public exploit code exists.

What to do

• Apply the vendor firmware updates referenced in CISA ICS advisory ICSA-21-208-03; patch is the first action.
• Change default credentials and disable any default or anonymous access on all affected camera models.
• Isolate cameras on a dedicated management VLAN and block direct internet exposure of their web and management interfaces.
• Restrict access to the device interfaces to trusted administrative hosts via firewall or ACL rules.
• If patching is not possible, take affected devices offline or replace them.

Detection

• Monitor camera management interfaces for unauthenticated requests to sensitive file paths and alert on anomalous access patterns.
• Review device and web server logs for access to configuration or credential files from unexpected source IPs.
• Watch for configuration changes, reboots or service interruptions on camera devices that could indicate manipulation or denial of service.
• Scan the network for affected Geutebrück and UDP Technology camera models and verify their authentication settings.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.