CRITICAL

CVE-2025-1316

Edimax Ic 7100 Firmware 2025-03-05 CVSS v3.1

CVSS

9.8

KEV

Description

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device

Summary dbcve.org

The Edimax IC-7100 IP camera contains an input validation vulnerability where user-supplied requests are not properly sanitized, allowing attackers to inject malicious commands that execute with elevated privileges on the device.

Mitigation

Isolate the device on a restricted VLAN with no direct internet exposure, implement firewall rules to limit access to trusted IPs only, and monitor for vendor security updates.

Weakness (CWE)

CWE-78 OS Command Injection

EPSS Score

74.48%

Probability of exploitation in next 30 days

99.5th percentile

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08 Mitigation, Third Party Advisory, US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE