Edimax Ic-3140w Firmware vulnerabilities

4 CVEs affecting Edimax Ic-3140w Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40597, published 2022-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-8072, published 2018-04-26. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based buffer overflow that is possible to…
CVE-2020-26762, published 2020-12-01. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a…
CVE-2021-40597, published 2022-06-29. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.
CVE-2021-30165, published 2021-04-27. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the…