# No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them > CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls. - Canonical URL: https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/ - Publisher: Detection Systems & Engineering (DSE Security) - Author: DSE Security Editorial Team - Published: 2026-10-19T00:28:09+00:00 - Modified: 2026-10-19T01:55:08+00:00 - Last reviewed by DSE: 2026-10-19 - Resource type: Briefing - DSE priority: Important - Topics: Cybersecurity, Video Surveillance - Reading time: 2 minutes ## What you need to know CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls. ## Potentially affected Sites with Edimax, AVTECH or GeoVision cameras or recorders, including older units on branch, warehouse and parking networks, and the integrators who maintain them. ## DSE recommendation DSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. ## Article CISA reports network-exploitable command injection flaws in Edimax IC-7100 cameras, all versions, and AVTECH AVM1203 cameras, says neither vendor responded to coordinate fixes, and added the Edimax flaw and two GeoVision device flaws to its Known Exploited Vulnerabilities catalog. It advises keeping such devices off the internet and behind firewalls. ## Source facts CISA advisory [ICSA-25-063-08](https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08), released March 4, 2025, says all versions of the Edimax IC-7100 IP camera have an OS command injection flaw, CVE-2025-1316, that lets an attacker achieve remote code execution with specially crafted requests, and that Edimax has not responded to CISA requests to coordinate. CISA [added CVE-2025-1316](https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog) to its Known Exploited Vulnerabilities catalog on March 19, 2025, based on evidence of active exploitation. Advisory [ICSA-24-214-07](https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07), released August 1, 2024, says commands can be injected over the network into AVTECH AVM1203 cameras on firmware FullImg-1023-1007-1011-1009 and earlier, CVE-2024-7029, that public exploitation is known, that other AVTECH cameras and NVRs are suspected to be affected, and that AVTECH has not responded to requests to work with CISA. On May 7, 2025, CISA also [added two GeoVision device](https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog) OS command injection flaws, CVE-2024-6047 and CVE-2024-11120, to the catalog based on evidence of active exploitation. For both cameras, CISA recommends minimizing network exposure so devices are not accessible from the internet, placing them behind firewalls isolated from business networks, and using more secure remote access such as updated VPNs. It says BOD 22-01 binds only federal civilian agencies but strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities. ## Applicability Use this for any site with these vendors’ cameras or recorders. Check exact models and firmware against each advisory, and note CISA’s warning that other AVTECH models may be affected. ## DSE recommendation DSE recommends finding every Edimax, AVTECH and GeoVision camera or recorder on your networks and replacing units that have no vendor fix. Until replacement, remove port forwarding and any public exposure, move them to an isolated camera network without internet access, block their outbound traffic, and reach them only through the VMS or a managed VPN. ## Verification Scan camera networks for these vendors’ devices, confirm none answer from the internet with an external scan, and record a replacement date for each unit. ## Official references [CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera](https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08). [CISA — CISA Adds Three Known Exploited Vulnerabilities to Catalog (March 19, 2025)](https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog). [CISA ICS Advisory ICSA-24-214-07 — AVTECH IP Camera](https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07). [CISA — CISA Adds Two Known Exploited Vulnerabilities to Catalog (May 7, 2025)](https://www.cisa.gov/news-events/alerts/2025/05/07/cisa-adds-two-known-exploited-vulnerabilities-catalog). Reviewed October 19, 2026. ## Primary reference - Name: CISA ICS Advisory ICSA-25-063-08 — Edimax IC-7100 IP Camera - Authority: Cybersecurity and Infrastructure Security Agency - URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08 - Source publication date: Not stated by the source ## Citation and use Preferred citation: “No vendor fix for exploited Edimax IC-7100 and AVTECH AVM1203 camera flaws: isolate or replace them,” DSE Security, https://update.dsesecurity.com/updates/edimax-ic-7100-avtech-avm1203-geovision-exploited-camera-flaws-no-fix-isolate-replace/ Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/ Usage and citation policy: https://update.dsesecurity.com/usage/ Copyright © 2026 Detection Systems & Engineering. All rights reserved.