Summary
Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Vendor
- Edimax
- Product
- IC-7100 IP Camera
- Added to KEV
- Mar 19, 2025
- Remediation due
- Apr 9, 2025 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-78
- EPSS
- 74.5% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References