CVE-2021-30165 - CVE House
Back to Database
Status published High CVE-2021-30165

EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password

Vulnerability Description

The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-30165

Credits & Attribution

No credits recorded in the NVD database.

References

More from EDIMAX Technology Co., Ltd.

View All →
CVE-2020-37097
Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)
High 8.7
CVE-2020-37096
Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
Medium 5.1

Affected Vendor

EDIMAX Technology Co., Ltd.

View all reports →

Affected Software

IC-3140W
Vulnerable Versions:
3.11

Timeline

Official Publish: April 27th, 2021
Last Modified: September 17th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-798

MITRE ATT&CK TTPs

T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1021 Remote Services
Lateral Movement
T1190 Exploit Public-Facing Application
Initial Access
T1098 Account Manipulation
Privilege Escalation