QwikSec

Security Database

CVE

CWE

Training

CVE-2024-7616

Published: Aug 8, 2024

Modified: Aug 9, 2024

PUBLISHED

CVSS v3.1

5.5

MEDIUM

Description

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcam_cgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vendor	Product	Versions
Edimax	IC-6220DC	affected `3.06`
Edimax	IC-5150W	affected `3.06`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

References

VDB-273986 | Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

vdb-entry

technical-description

VDB-273986 | CTI Indicators (IOB, IOC, TTP, IOA)

signature

permissions-required

Submit #383845 | edimax IC-6220DC 3.06 command injection

third-party-advisory

https://yjz233.notion.site/edimax-IC-6220DC-has-command-injection-vulnerability-in-ipcam_cgi-2029d67721f2473b8cfce5e286a70307?pvs=4

broken-link

https://yjz233.notion.site/edimax-IC-5150W-has-command-injection-vulnerability-in-ipcam_cgi-cc72c7b7e2f24ba6a6609b6fcf78df34

broken-link

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.