CVE-2024-7616: Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7616?
CVE-2024-7616 has been rated as critical due to the command injection vulnerability it presents.
How does CVE-2024-7616 exploit occur?
CVE-2024-7616 exploits the function cgiFormString in the ipcam_cgi file, allowing manipulation of the host argument.
What devices are affected by CVE-2024-7616?
CVE-2024-7616 affects Edimax IC-6220DC and IC-5150W devices running firmware versions up to 3.06.
How can I fix CVE-2024-7616?
To fix CVE-2024-7616, update the firmware of the affected Edimax devices to the latest version released by the vendor.
Is CVE-2024-7616 likely to be exploited in the wild?
Due to its critical nature and the command injection aspect, CVE-2024-7616 could be exploited in the wild if not mitigated.