CVE-2020-26762 - CVE House

Back to Database

Status published Critical CVE-2020-26762

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and...

9.8 CVSS

Vulnerability Description

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcam_cgi due to a missing type check in function doGetSysteminfo(). This has been fixed in version: IC-3116W v3.08.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26762

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.edimax.com/edimax/download/download/data/edimax/de/download/for_home/home_network_cameras/home_network_cameras_indoor_fixed/ic-3116w

More from edimax

View All →

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router...

The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with...

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...

Affected Vendor

edimax

View all reports →

Affected Software

ic-3116w firmware, ic-3140w firmware

Vulnerable Versions:

3.06, 3.07

Timeline

Official Publish: December 1st, 2020

Last Modified: August 4th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.