CVE-2018-8072 : An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09,

An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUE_HERE HTTP request: if the VALUE_HERE length is more than 0x400 (1024), it is possible to overwrite other values located on the stack due to an incorrect use of the strcpy() function.

Published 2018-04-26 15:29:00

Updated 2020-08-24 17:37:01

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowMemory Corruption

Products affected by CVE-2018-8072

Edimax » Ic-3140w Firmware
Versions up to, including, (<=) 3.06
cpe:2.3:o:edimax:ic-3140w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Edimax » Ic-3140w » Version: N/A
Edimax » Ic-5150w Firmware
Versions up to, including, (<=) 3.09
cpe:2.3:o:edimax:ic-5150w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Edimax » Ic-5150w » Version: N/A
Edimax » Ic-6220dc Firmware
Versions up to, including, (<=) 3.06
cpe:2.3:o:edimax:ic-6220dc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Edimax » Ic-6220dc » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-8072

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 58 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-8072

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:P/A:P	6.5	6.4	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-8072

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-8072

https://www.edimax.com/edimax/download/download/data/edimax/uk/download/for_home/home_network_cameras/home_network_cameras_indoor_fixed/ic-3140w

EDIMAX - Download
Patch;Product;Vendor Advisory
https://gitlab.com/nemux/CVE-2018-8072/blob/master/nemux_codemotion_Rome18_cover.pdf

nemux_codemotion_Rome18_cover.pdf · master · nemux / CVE-2018-8072 · GitLab
Exploit;Technical Description;Third Party Advisory
https://gitlab.com/nemux/CVE-2018-8072/blob/master/CVE-2018-8072_PoC.txt

CVE-2018-8072_PoC.txt · master · nemux / CVE-2018-8072 · GitLab
Exploit;Third Party Advisory
https://www.nemux.org/2018/04/24/cve-2018-8072/

CVE-2018-8072 - Stack Buffer Overflow -EDIMAX Network Cameras
Patch;Third Party Advisory

Jump to

Vulnerability Details : CVE-2018-8072

Products affected by CVE-2018-8072

Exploit prediction scoring system (EPSS) score for CVE-2018-8072

CVSS scores for CVE-2018-8072

CWE ids for CVE-2018-8072

References for CVE-2018-8072