CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2015-2280Public Exploit

AirLink101 SkyIPCam1620W - RCE (CVE-2015-2280)

PublishedJul 24, 2017
First SeenOct 19, 2025
Last Seen
Reported
CVSS8.8
AirLink101
AirLink101SkyIPCam1620W
iot

Description

snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.

psychologyCrowdSec Analysis

CVE-2015-2280 is Remote Code Execution vulnerability affecting AirLink101 SkyIPCam network camera. The vulnerability allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.

CrowdSec has been tracking this vulnerability and its exploits since 2nd of July 2025.

CrowdSec has not observed any significant exploitation activity targeting CVE-2015-2280 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Observed exploitation targets /maker/snwrite.cgi endpoint and the mac parameter.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2017-07-24
Rule Released2025-07-02
CrowdSec First Seen2025-10-19

Related Weaknesses

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References