CVE-2020-26762

Published: Dec 1, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcam_cgi due to a missing type check in function doGetSysteminfo(). This has been fixed in version: IC-3116W v3.08.

Affected (2)

Products: Edimax: Ic 3116w Firmware, Ic 3140w Firmware

2 products

Ic 3116w Firmware

Ic 3140w Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Edimax Ic 3116w Firmware	Version 3.06

Running on/with	Platform Versions
Edimax Ic 3116w	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Edimax Ic 3140w Firmware	Version 3.07

Running on/with	Platform Versions
Edimax Ic 3140w	All versions

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.edimax.com/edimax/download/download/data/edimax/de/download/for_home/home_network_cameras/home_network_cameras_indoor_fixed/ic-3116w

Source: cve@mitre.org

Vendor Advisory

https://www.edimax.com/edimax/download/download/data/edimax/de/download/for_home/home_network_cameras/home_network_cameras_indoor_fixed/ic-3116w

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.