CVE-2018-8072: Buffer Overflow
An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcamcgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUEHERE HTTP request: if the VALUEHERE length is more than 0x400 (1024), it is possible to overwrite other values located on the stack due to an incorrect use of the strcpy() function.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8072?
CVE-2018-8072 is classified as a critical vulnerability due to its potential for remote code execution through a stack-based buffer overflow.
How do I fix CVE-2018-8072?
To fix CVE-2018-8072, upgrade the firmware of the affected Edimax devices to the latest available version provided by the manufacturer.
Which Edimax devices are affected by CVE-2018-8072?
CVE-2018-8072 affects the Edimax IC-3140W firmware versions up to 3.06, IC-5150W firmware versions up to 3.09, and IC-6220DC firmware versions up to 3.06.
What kind of exploit is possible with CVE-2018-8072?
CVE-2018-8072 allows attackers to exploit a stack-based buffer overflow remotely and potentially execute arbitrary code on the affected devices.
Is CVE-2018-8072 remotely exploitable?
Yes, CVE-2018-8072 can be exploited remotely without authentication, making it particularly dangerous.