Edimax Ic 3140W vulnerabilities
4 vulnerabilities
Known vulnerabilities in Edimax Ic 3140W, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2018-8072edimax · ic-3140w_firmware +2 moreedimax ic-3140w_firmwareAn issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUE_HERE HTTP request: if the VALUE_HERE length is more than 0x400 (1024), it is possible to overwrite other values located on the stack due to an incorrect use of the strcpy() function.EPSS2.75%CriticalCVE-2021-40597edimax · ic-3140w_firmwareedimax ic-3140w_firmwareThe firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.EPSS2.07%HighCVE-2021-30165edimax technology co., ltd. · ic-3140w +1 moreEDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded passwordThe default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices.EPSS1.07%CriticalCVE-2020-26762edimax · ic-3116w_firmware +1 moreedimax ic-3116w_firmwareA stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcam_cgi due to a missing type check in function doGetSysteminfo(). This has been fixed in version: IC-3116W v3.08.EPSS2.33%