CVE-2017-5173

An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/96209Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/41360/Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/96209Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/41360/Exploit, Third Party Advisory, VDB Entry

Published

May 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5165An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5166An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5167An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5168An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5169An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5170An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Con…
• CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Control…
• CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server…
• CVE-2017-5179Cross-site scripting (XSS) vulnerability in Tenable Nessus b…