What’s Vulnerable › Vulnerabilities

CVE-2024-7029: Command Injection in AVTech AVM1203 (IP Camera)

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 43.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-08-02 · updated 2026-06-17
• Weakness: CWE-77

Description

Commands can be injected over the network and executed without authentication.

Affected products

• AVTech AVM1203 (IP Camera): through fullimg-1023-1007-1011-1009

References

• https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07

Get alerted when CVE-2024-7029 or the next vulnerability affects your stack