EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password
Priority LOW 37CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices.
Why it matters now
EPSS 0.01073 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Edimax | IC-3140W | 3.11 | — | No fix listed | CNA |
- IC-3140W VendorEdimax Affected 3.11 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-30165
- 2026-10-03 Alias added: GHSA-8cxg-pmw5-mg86
References
More Edimax Ic-3140w Firmware vulnerabilities
- TI-2020-16259 A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W… CVSS 3.1CRITICAL 9.8
- TI-2021-17606 The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password. CVSS 3.1CRITICAL 9.8
- TI-2018-05839 An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and… CVSS 3.0HIGH 8.8
Sources
- CVE-2021-30165 · CVE Program
- CVE-2021-30165 · NVD
- FIRST EPSS
- GHSA-8cxg-pmw5-mg86 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences