Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
Briefly

CVE-2024-7029 is a high-severity command injection vulnerability in AVTECH CCTV cameras allowing remote code execution, exploited since March 2024 for botnet creation.
Successful exploitation could enable attackers to execute commands as the owner of the running process, highlighting the urgency for users of the affected AVM1203 camera devices.
The vulnerability remains unpatched and affects discontinued AVTECH devices still in use across various sectors, raising significant security concerns for commercial and public services.
Many publicly available exploits lack formal CVE assignments, leaving devices vulnerable and exploited by botnets, illustrating a troubling trend in cybersecurity preparedness.
Read at The Hacker News
[
|
]