CVE-2024-7029 HIGH

CVE-2024-7029: Command Injection in AVTech AVM1203 (IP Camera)

Vendor Avtech
Product AVM1203 (IP Camera)
Weakness CWE-77
Published August 2, 2024
Last update January 9, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Commands can be injected over the network and executed without authentication.

Key dates

02Disclosure timeline

August 2, 2024 CVE published
January 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-1414 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection CVE-2018-0454 Cisco Cloud Services Platform 2100 Command Injection Vulnerability CVE-2026-4199 bazinga012 mcp_code_executor index.ts installDependencies command injection CVE-2026-9440 Edimax BR-6478AC POST Request formAccept command injection CVE-2026-4543 Wavlink WL-WN578W2 POST Request firewall.cgi command injection