Lucene search

CVE-2018-8072

🗓️ 26 Apr 2018 15:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 24 Views🌐 WEB

CVE-2018-8072: Buffer overflow in EDIMAX ipcam_cgi binar

Reporter	Title	Published	Views	Family All 3
Prion	Stack overflow	26 Apr 201815:29	–	prion
Cvelist	CVE-2018-8072	26 Apr 201815:00	–	cvelist
NVD	CVE-2018-8072	26 Apr 201815:29	–	nvd

Nvd

Node

edimax ic-3140w_firmwareRange≤3.06

AND

edimax ic-3140wMatch-

Node

edimax ic-5150w_firmwareRange≤3.09

AND

edimax ic-5150wMatch-

Node

edimax ic-6220dc_firmwareRange≤3.06

AND

edimax ic-6220dcMatch-

Source	Link
gitlab	www.gitlab.com/nemux/CVE-2018-8072/blob/master/CVE-2018-8072_PoC.txt
gitlab	www.gitlab.com/nemux/CVE-2018-8072/blob/master/nemux_codemotion_Rome18_cover.pdf
edimax	www.edimax.com/edimax/download/download/data/edimax/uk/download/for_home/home_network_cameras/home_network_cameras_indoor_fixed/ic-3140w
nemux	www.nemux.org/2018/04/24/cve-2018-8072/

Parameter	Position	Path	Description	CWE
action	query param	/camera-cgi/public/getsysyeminfo.cgi	Stack-based buffer overflow in ipcam_cgi due to improper handling of the 'action' query parameter when its length exceeds 1024 bytes.	CWE-787

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Apr 2018 15:29Current

8.9High risk

Vulners AI Score8.9

CVSS25.8

CVSS38.8

EPSS0.00167

CWE-787