Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year

An unpatched security flaw impacting the Edimax IC-7100 network camera is being
exploited by threat actors to deliver Mirat botnet malware variants since at
least May 2024.

The vulnerability in question is CVE-2025-1316 (CVSS v4 score: 9.3), a critical
operating system command injection flaw that an attacker could exploit to
achieve remote code execution on susceptible devices by means of a specially
crafted request.

Web infrastructure and security company Akamai said the earliest exploit attempt
targeting the flaw dates back to May 2024, although a proof-of-concept (PoC)
exploit has been publicly available since June 2023.

https://thehackernews.com/2025/03/unpatched-e...

--- BBBS/LiR v4.10 Toy-7
 * Origin: TCOB1: https/binkd/telnet binkd.rima.ie (618:500/1)