Edimax IC-6220DC和Edimax IC-5150W 命令注入漏洞

Edimax IC-6220DC and Edimax IC-5150W are both smart wireless cameras from China Xunzhou Edimax. Command injection vulnerability exists in Edimax IC-6220DC and Edimax IC-5150W version 3.06 and earlier, which stems from the parameter host of the function cgiFormString in the file ipcamcgi, which ca...

CVE-2024-7616: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...

CVE-2024-7616

Edimax IC-6220DC and IC-5150W (firmware ≤ 3.06) expose a command-injection vulnerability in the ipcam_cgi module, specifically via the cgiFormString function manipulating the host argument. Exploitation could yield unauthorized commands on affected devices. Remediation from the connected sources:...

CVE-2024-7616 Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...

CVE-2020-26762: Out-of-bounds Write

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...

CVE-2018-8072

Summary: A stack-based buffer overflow in the EDIMAX IP cameras affects IC-3140W (≤3.06), IC-5150W (≤3.09), and IC-6220DC (≤3.06) due to the ipcam_cgi binary. A remote unauthenticated HTTP request to /camera-cgi/public/getsysyeminfo.cgi?action=VALUE_HERE can overflow the stack if VALUE_HERE > ...

CVE-2018-8072: Out-of-bounds Write

An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcamcgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUEHERE HTTP...