CVE-2024-7616 - Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

Back Back to CVE browser

MEDIUM

Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

Published Aug 8, 2024

5.1

MEDIUM

CVSS 4.0

EPSS 4.72%

Description

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcam_cgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Edimax Product IC-6220DC Default
n/a
- Version
  3.06
  Status
  affected
  Constraints
  -
Vendor Edimax Product n/a Default
n/a
- Version
  3.06
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Edimax

IC-6220DC

n/a

Version	Status	Constraints
3.06	affected	-

Edimax

n/a

Version	Status	Constraints
3.06	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (5)

https://vuldb.com/?ctiid.273986
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273986
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.383845
third-party-advisoryThird Party AdvisoryVDB Entry
https://yjz233.notion.site/edimax-IC-5150W-has-command-injection-vulnerability-in-ipcam_cgi-cc72c7b7e2f24ba6a6609b6fcf78df34
broken-linkPermissions Required
https://yjz233.notion.site/edimax-IC-6220DC-has-command-injection-vulnerability-in-ipcam_cgi-2029d67721f2473b8cfce5e286a70307?pvs=4
broken-linkPermissions Required

Link	Providers	Tags
https://vuldb.com/?ctiid.273986		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273986		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.383845		third-party-advisoryThird Party AdvisoryVDB Entry
https://yjz233.notion.site/edimax-IC-5150W-has-command-injection-vulnerability-in-ipcam_cgi-cc72c7b7e2f24ba6a6609b6fcf78df34		broken-linkPermissions Required
https://yjz233.notion.site/edimax-IC-6220DC-has-command-injection-vulnerability-in-ipcam_cgi-2029d67721f2473b8cfce5e286a70307?pvs=4		broken-linkPermissions Required

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Aug 8, 2024

Updated Aug 9, 2024

Reserved Aug 8, 2024

Link CVE-2024-7616

CISA Vulnrichment

Updated Aug 9, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-7616

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-7616