CVE Vulnerability Advisory Database

[Affected Scope] Edimax IC-7100 IP camera devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately, or restrict management interface access from the public internet and isolate the affected devices

[Affected Scope] IoT, medical devices, industrial control systems, and network equipment utilizing Treck TCP/IP embedded protocol stack versions prior to 6.0.1.66

[Impact] An adjacent attacker can send specially crafted IPv6 packets to trigger an out-of-bounds read, leading to information disclosure or system crash/denial of service (DoS)

[Mitigation] Apply the latest firmware updates provided by your device vendors (incorporating Treck 6.0.1.66 or higher) and restrict unnecessary IPv6 traffic at the network boundary

[Affected Scope] Amcrest and Dahua IP cameras and NVR devices with TCP port 37777 enabled

[Impact] Authenticated remote attackers can exploit this vulnerability to crash the device (DoS) or potentially execute arbitrary code (RCE)

[Mitigation] Apply the latest firmware updates immediately and restrict access to TCP port 37777 using firewalls