Vulnerability · Published Aug 2, 2024 · Assigned by icscert
CVE-2024-7029Command Injection in AVTech AVM1203 (IP Camera)
High 8.8
In plain English
A high-severity command injection in AVM1203 (IP Camera) from AVTech. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 43.3% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)43.3%top 1.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling2Nuclei, Public PoC
Official description
Commands can be injected over the network and executed without authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AVTech | AVM1203 (IP Camera) | 0 – through FullImg-1023-1007-1011-1009 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H