medium5.5
CVE-2024-7616
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06.
Impact
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcam_cgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edimax | Ic-6220dc Firmware | through 3.06 |
| Edimax | Ic-5150w Firmware | through 3.06 |
Weakness classification
References
- NVD record
- CVE.org record
- https://vuldb.com/?ctiid.273986
- https://vuldb.com/?id.273986
- https://vuldb.com/?submit.383845
- https://yjz233.notion.site/edimax-IC-5150W-has-command-injection-vulnerability-in-ipcam_cgi-cc72c7b7e2f24ba6a6609b6fcf78df34
- https://yjz233.notion.site/edimax-IC-6220DC-has-command-injection-vulnerability-in-ipcam_cgi-2029d67721f2473b8cfce5e286a70307?pvs=4