CVE-2024-7029 is a critical command injection vulnerability affecting AVTECH AVM1203 IP cameras and their firmware, allowing unauthenticated attackers to execute arbitrary commands over the network. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Although not in the KEV catalog, this vulnerability is actively exploited in the wild by botnets like RondoDox and Mirai, targeting end-of-life devices. Community discussion and media coverage are exceptionally high, indicating significant awareness and ongoing exploitation efforts, with Nuclei templates available for detection.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= fullimg-1023-1007-1011-1009CPE matchmatch criteria | cpe:2.3:o:avtech:avm1203_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.