CISA Known Exploited Vulnerability (KEV)
Edimax IC-7100 IP Camera OS Command Injection Vulnerability
March 19, 2025
April 9, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device
Weakness Enumeration
| CWE-ID | CWE Name |
|---|---|
|
CWE-78 |
Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) |