{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
        "slug": "edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace",
        "url": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/"
        },
        "title": "No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them",
        "summary": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.",
        "format": {
            "slug": "briefing",
            "name": "Briefing"
        },
        "priority": {
            "slug": "important",
            "name": "Important"
        },
        "featured": false,
        "image": {
            "theme": "physical-security",
            "label": "Physical security",
            "alt": "Integrated video surveillance and controlled entry at a modern commercial facility.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/physical-security-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/physical-security-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "video-surveillance",
                "name": "Video Surveillance",
                "url": "https://update.dsesecurity.com/topic/video-surveillance/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-19T00:28:09+00:00",
        "modified_at": "2026-10-19T01:55:08+00:00",
        "reviewed_on": "2026-10-19",
        "reading_minutes": 2,
        "word_count": 413,
        "potentially_affected": "Sites with Edimax, AVTECH or GeoVision cameras or recorders, including older units on branch, warehouse and parking networks, and the integrators who maintain them.",
        "dse_recommendation": "DSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix.",
        "primary_source": {
            "name": "CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera",
            "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08",
            "published_on": null,
            "authority": "Cybersecurity and Infrastructure Security Agency"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.</p>\n<h2>Source facts</h2>\n<p>CISA advisory <a href=\"https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08\">ICSA-25-063-08</a>, released March 4, 2025, says all versions of the Edimax IC-7100 IP camera have an OS command injection flaw, CVE-2025-1316, that lets an attacker achieve remote code execution with specially crafted requests, and that Edimax has not responded to CISA requests to coordinate. CISA <a href=\"https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog\">added CVE-2025-1316</a> to its Known Exploited Vulnerabilities catalog on March 19, 2025, based on evidence of active exploitation.</p>\n<p>Advisory <a href=\"https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07\">ICSA-24-214-07</a>, released August 1, 2024, says commands can be injected over the network into AVTECH AVM1203 cameras on firmware FullImg-1023-1007-1011-1009 and earlier, CVE-2024-7029, that public exploitation is known, that other AVTECH cameras and NVRs are suspected to be affected, and that AVTECH has not responded to requests to work with CISA. On May 7, 2025, CISA also <a href=\"https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog\">added two GeoVision device</a> OS command injection flaws, CVE-2024-6047 and CVE-2024-11120, to the catalog based on evidence of active exploitation.</p>\n<p>For both cameras, CISA recommends minimizing network exposure so devices are not accessible from the internet, placing them behind firewalls isolated from business networks, and using more secure remote access such as updated VPNs. It says BOD 22-01 binds only federal civilian agencies but strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities.</p>\n<h2>Applicability</h2>\n<p>Use this for any site with these vendors’ cameras or recorders. Check exact models and firmware against each advisory, and note CISA’s warning that other AVTECH models may be affected.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. Until replacement, remove port forwarding and any public exposure, move them to an isolated camera network without internet access, block their outbound traffic, and reach them only through the VMS or a managed VPN.</p>\n<h2>Verification</h2>\n<p>Scan camera networks for these vendors’ devices, confirm none answer from the internet with an external scan, and record a replacement date for each unit.</p>\n<h2>Official references</h2>\n<p><a href=\"https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08\">CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera</a>. <a href=\"https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog\">CISA — CISA Adds Three Known Exploited Vulnerabilities to Catalog (March 19, 2025)</a>. <a href=\"https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07\">CISA ICS Advisory ICSA-24-214-07 — AVTECH IP Camera</a>. <a href=\"https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog\">CISA — CISA Adds Two Known Exploited Vulnerabilities to Catalog (May 7, 2025)</a>. Reviewed October 19, 2026.</p>",
        "content_text": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.\nSource facts\nCISA advisory ICSA-25-063-08, released March 4, 2025, says all versions of the Edimax IC-7100 IP camera have an OS command injection flaw, CVE-2025-1316, that lets an attacker achieve remote code execution with specially crafted requests, and that Edimax has not responded to CISA requests to coordinate. CISA added CVE-2025-1316 to its Known Exploited Vulnerabilities catalog on March 19, 2025, based on evidence of active exploitation.\nAdvisory ICSA-24-214-07, released August 1, 2024, says commands can be injected over the network into AVTECH AVM1203 cameras on firmware FullImg-1023-1007-1011-1009 and earlier, CVE-2024-7029, that public exploitation is known, that other AVTECH cameras and NVRs are suspected to be affected, and that AVTECH has not responded to requests to work with CISA. On May 7, 2025, CISA also added two GeoVision device OS command injection flaws, CVE-2024-6047 and CVE-2024-11120, to the catalog based on evidence of active exploitation.\nFor both cameras, CISA recommends minimizing network exposure so devices are not accessible from the internet, placing them behind firewalls isolated from business networks, and using more secure remote access such as updated VPNs. It says BOD 22-01 binds only federal civilian agencies but strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities.\nApplicability\nUse this for any site with these vendors’ cameras or recorders. Check exact models and firmware against each advisory, and note CISA’s warning that other AVTECH models may be affected.\nDSE recommendation\nDSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. Until replacement, remove port forwarding and any public exposure, move them to an isolated camera network without internet access, block their outbound traffic, and reach them only through the VMS or a managed VPN.\nVerification\nScan camera networks for these vendors’ devices, confirm none answer from the internet with an external scan, and record a replacement date for each unit.\nOfficial references\nCISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera. CISA — CISA Adds Three Known Exploited Vulnerabilities to Catalog (March 19, 2025). CISA ICS Advisory ICSA-24-214-07 — AVTECH IP Camera. CISA — CISA Adds Two Known Exploited Vulnerabilities to Catalog (May 7, 2025). Reviewed October 19, 2026.",
        "content_markdown": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.\n\n## Source facts\n\nCISA advisory [ICSA-25-063-08](https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08), released March 4, 2025, says all versions of the Edimax IC-7100 IP camera have an OS command injection flaw, CVE-2025-1316, that lets an attacker achieve remote code execution with specially crafted requests, and that Edimax has not responded to CISA requests to coordinate. CISA [added CVE-2025-1316](https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog) to its Known Exploited Vulnerabilities catalog on March 19, 2025, based on evidence of active exploitation.\n\nAdvisory [ICSA-24-214-07](https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07), released August 1, 2024, says commands can be injected over the network into AVTECH AVM1203 cameras on firmware FullImg-1023-1007-1011-1009 and earlier, CVE-2024-7029, that public exploitation is known, that other AVTECH cameras and NVRs are suspected to be affected, and that AVTECH has not responded to requests to work with CISA. On May 7, 2025, CISA also [added two GeoVision device](https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog) OS command injection flaws, CVE-2024-6047 and CVE-2024-11120, to the catalog based on evidence of active exploitation.\n\nFor both cameras, CISA recommends minimizing network exposure so devices are not accessible from the internet, placing them behind firewalls isolated from business networks, and using more secure remote access such as updated VPNs. It says BOD 22-01 binds only federal civilian agencies but strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities.\n\n## Applicability\n\nUse this for any site with these vendors’ cameras or recorders. Check exact models and firmware against each advisory, and note CISA’s warning that other AVTECH models may be affected.\n\n## DSE recommendation\n\nDSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. Until replacement, remove port forwarding and any public exposure, move them to an isolated camera network without internet access, block their outbound traffic, and reach them only through the VMS or a managed VPN.\n\n## Verification\n\nScan camera networks for these vendors’ devices, confirm none answer from the internet with an external scan, and record a replacement date for each unit.\n\n## Official references\n\n[CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera](https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08). [CISA — CISA Adds Three Known Exploited Vulnerabilities to Catalog (March 19, 2025)](https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog). [CISA ICS Advisory ICSA-24-214-07 — AVTECH IP Camera](https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07). [CISA — CISA Adds Two Known Exploited Vulnerabilities to Catalog (May 7, 2025)](https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog). Reviewed October 19, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
                "url": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-19"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them",
                        "item": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/#article",
                "identifier": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
                "url": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/",
                "headline": "No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them",
                "description": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor…",
                "abstract": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.",
                "articleBody": "CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls.\nSource facts\nCISA advisory ICSA-25-063-08, released March 4, 2025, says all versions of the Edimax IC-7100 IP camera have an OS command injection flaw, CVE-2025-1316, that lets an attacker achieve remote code execution with specially crafted requests, and that Edimax has not responded to CISA requests to coordinate. CISA added CVE-2025-1316 to its Known Exploited Vulnerabilities catalog on March 19, 2025, based on evidence of active exploitation.\nAdvisory ICSA-24-214-07, released August 1, 2024, says commands can be injected over the network into AVTECH AVM1203 cameras on firmware FullImg-1023-1007-1011-1009 and earlier, CVE-2024-7029, that public exploitation is known, that other AVTECH cameras and NVRs are suspected to be affected, and that AVTECH has not responded to requests to work with CISA. On May 7, 2025, CISA also added two GeoVision device OS command injection flaws, CVE-2024-6047 and CVE-2024-11120, to the catalog based on evidence of active exploitation.\nFor both cameras, CISA recommends minimizing network exposure so devices are not accessible from the internet, placing them behind firewalls isolated from business networks, and using more secure remote access such as updated VPNs. It says BOD 22-01 binds only federal civilian agencies but strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities.\nApplicability\nUse this for any site with these vendors’ cameras or recorders. Check exact models and firmware against each advisory, and note CISA’s warning that other AVTECH models may be affected.\nDSE recommendation\nDSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. Until replacement, remove port forwarding and any public exposure, move them to an isolated camera network without internet access, block their outbound traffic, and reach them only through the VMS or a managed VPN.\nVerification\nScan camera networks for these vendors’ devices, confirm none answer from the internet with an external scan, and record a replacement date for each unit.\nOfficial references\nCISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera. CISA — CISA Adds Three Known Exploited Vulnerabilities to Catalog (March 19, 2025). CISA ICS Advisory ICSA-24-214-07 — AVTECH IP Camera. CISA — CISA Adds Two Known Exploited Vulnerabilities to Catalog (May 7, 2025). Reviewed October 19, 2026.",
                "datePublished": "2026-10-19T00:28:09+00:00",
                "dateModified": "2026-10-19T01:55:08+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them"
                },
                "articleSection": [
                    "Cybersecurity",
                    "Video Surveillance"
                ],
                "keywords": [
                    "Cybersecurity",
                    "Video Surveillance",
                    "Briefing",
                    "Important priority"
                ],
                "genre": "Briefing",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Video Surveillance",
                        "url": "https://update.dsesecurity.com/topic/video-surveillance/"
                    }
                ],
                "wordCount": 413,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera",
                    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08"
                }
            }
        ]
    }
}