Edimax IC-7100 IP Camera OS Command Injection Vulnerability Allowing Remote Code Execution

A vulnerability exists in the Edimax IC-7100 IP camera due to improper neutralization of requests, allowing an attacker to send specially crafted requests that can be executed as commands on the device, leading to remote code execution. This issue affects all versions of the IC-7100 IP camera.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Remediation

Edimax has not responded to CISA requests for coordination on this vulnerability. Affected users are encouraged to contact Edimax customer support. CISA recommends minimizing network exposure for control system devices, locating them behind firewalls, and using secure remote access methods such as VPNs. Organizations should also perform impact analysis and risk assessment before deploying defensive measures.