{"history":[{"alert":0,"cve":"CVE-2025-1316","id":22760,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.74482, \"percentile\": 0.99502}"},{"alert":0,"cve":"CVE-2025-1316","id":20380,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.74482, \"percentile\": 0.99498}"},{"alert":0,"cve":"CVE-2025-1316","id":18349,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.74482, \"percentile\": 0.99498}"},{"alert":0,"cve":"CVE-2025-1316","id":16413,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.74482, \"percentile\": 0.99497}"},{"alert":0,"cve":"CVE-2025-1316","id":14391,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.74482, \"percentile\": 0.99497}"},{"alert":0,"cve":"CVE-2025-1316","id":12173,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.74482, \"percentile\": 0.99497}"},{"alert":0,"cve":"CVE-2025-1316","id":10159,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.74482, \"percentile\": 0.99496}"},{"alert":0,"cve":"CVE-2025-1316","id":7708,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.74482, \"percentile\": 0.99496}"},{"alert":1,"cve":"CVE-2025-1316","id":5977,"kind":"cna","observed_at":1793744401,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2025-1316\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-03-19T18:07:15.456983Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-03-19\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T22:55:25.794Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-03-19T00:00:00.000Z\", \"value\": \"CVE-2025-1316 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"IC-7100 IP Camera\", \"vendor\": \"Edimax\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Akamai SIRT reported this vulnerability to CISA.\"}], \"datePublic\": \"2025-03-04T17:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"<span style=\\\"background-color: rgb(255, 255, 255);\\\">Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device</span>\"}], \"value\": \"Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device\"}], \"metrics\": [{\"cvssV4_0\": {\"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"attackVector\": \"NETWORK\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"privilegesRequired\": \"NONE\", \"providerUrgency\": \"NOT_DEFINED\", \"subAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"version\": \"4.0\", \"vulnAvailabilityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-03-04T23:36:59.724Z\", \"orgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"shortName\": \"icscert\"}, \"references\": [{\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08\"}], \"source\": {\"advisory\": \"ICSA-25-063-08\", \"discovery\": \"EXTERNAL\"}, \"title\": \"Edimax IC-7100 IP Camera OS Command Injection\", \"workarounds\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"<span style=\\\"background-color: rgb(255, 255, 255);\\\">Edimax has not responded to CISA requests to coordinate the vulnerability. Affected users are encouraged to reach out to </span><a target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://www.edimax.com/edimax/form/contact_us/data/edimax/global/contact_us/\\\">Edimax customer support</a><span style=\\\"background-color: rgb(255, 255, 255);\\\">.</span>\\n\\n<br>\"}], \"value\": \"Edimax has not responded to CISA requests to coordinate the vulnerability. Affected users are encouraged to reach out to  Edimax customer support https://www.edimax.com/edimax/form/contact_us/data/edimax/global/contact_us/ .\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"assignerShortName\": \"icscert\", \"cveId\": \"CVE-2025-1316\", \"datePublished\": \"2025-03-04T23:36:59.724Z\", \"dateReserved\": \"2025-02-14T21:54:41.042Z\", \"dateUpdated\": \"2025-10-21T22:55:25.794Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2025-1316","id":5485,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.74482, \"percentile\": 0.99496}"},{"alert":0,"cve":"CVE-2025-1316","id":3267,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.74482, \"percentile\": 0.99495}"},{"alert":1,"cve":"CVE-2025-1316","id":462,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2025-1316\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2025-03-19\", \"dueDate\": \"2025-04-09\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.edimax.com/edimax/post/post/data/edimax/global/press_releases/4801/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-1316\", \"product\": \"IC-7100 IP Camera\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.\", \"vendorProject\": \"Edimax\", \"vulnerabilityName\": \"Edimax IC-7100 IP Camera OS Command Injection Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"IC-7100 IP Camera","vendor":"Edimax","versions":[{"status":"affected","version":"All"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-1316","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-19T18:07:15.456983Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-03-19","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T22:55:25.794Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316"}],"timeline":[{"lang":"en","time":"2025-03-19T00:00:00.000Z","value":"CVE-2025-1316 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"IC-7100 IP Camera","vendor":"Edimax","versions":[{"status":"affected","version":"All"}]}],"credits":[{"lang":"en","type":"finder","value":"Akamai SIRT reported this vulnerability to CISA."}],"datePublic":"2025-03-04T17:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device</span>"}],"value":"Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-03-04T23:36:59.724Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08"}],"source":{"advisory":"ICSA-25-063-08","discovery":"EXTERNAL"},"title":"Edimax IC-7100 IP Camera OS Command Injection","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Edimax has not responded to CISA requests to coordinate the vulnerability. Affected users are encouraged to reach out to </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.edimax.com/edimax/form/contact_us/data/edimax/global/contact_us/\">Edimax customer support</a><span style=\"background-color: rgb(255, 255, 255);\">.</span>\n\n<br>"}],"value":"Edimax has not responded to CISA requests to coordinate the vulnerability. Affected users are encouraged to reach out to  Edimax customer support https://www.edimax.com/edimax/form/contact_us/data/edimax/global/contact_us/ ."}],"x_generator":{"engine":"Vulnogram 0.2.0"}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2025-1316","datePublished":"2025-03-04T23:36:59.724Z","dateReserved":"2025-02-14T21:54:41.042Z","dateUpdated":"2025-10-21T22:55:25.794Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794198001,"cve":"CVE-2025-1316","description":"Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device","epss":{"date":"2026-11-12","epss":0.74482,"percentile":0.99502},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2025-1316","cwes":["CWE-78"],"dateAdded":"2025-03-19","dueDate":"2025-04-09","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.edimax.com/edimax/post/post/data/edimax/global/press_releases/4801/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-1316","product":"IC-7100 IP Camera","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.","vendorProject":"Edimax","vulnerabilityName":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability"},"kev_checked":1794522003,"products":"Edimax IC-7100 IP Camera","references":["https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316"],"score":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","provider":"icscert","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"solutions":"","state":"PUBLISHED","title":"Edimax IC-7100 IP Camera OS Command Injection","updated_at":1794500401,"workarounds":"Edimax has not responded to CISA requests to coordinate the vulnerability. Affected users are encouraged to reach out to  Edimax customer support https://www.edimax.com/edimax/form/contact_us/data/edimax/global/contact_us/ ."},"sources":[]}