CVE-2025-1316

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.edimax.com/edimax/post/post/data/edimax/global/press_releases/4801/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-1316

Remediation deadline: April 9, 2025

Description

Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Timeline

Published:March 19th, 2025 12:00 AM

Last modified:March 19th, 2025 12:00 AM

Added to KEV:March 19th, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Edimax

Products

IC-7100 IP Camera

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute