# CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device

- Page: https://www.vulneraibility.com/cve/CVE-2025-1316
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2025-03-19; CISA due date 2025-04-09
- EPSS: 74.48%
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-03-19)
- Weakness: CWE-78
- Published: 2025-03-05

## Affected

- edimax:ic-7100_firmware

## References

- [other] https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.