CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - ics-cert@hq.dhs.gov

Published

2025-03-05

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2025-03-19, action due 2025-04-09: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

CWE-78

Affected products

• Ic-7100 Firmware (Edimax)
• Ic-7100 Ip Camera (Edimax)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316