Edimax

Records159All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

Edimax records in CISA KEV

TI-2025-01129 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CRITICAL 99KEV 2025-03-19

Components

Products in the NVD configurations · select one to filter the records

Br-6478ac V3 Firmware 8 records HIGH Ew-7438rpn Mini Firmware 8 records HIGH Re11s Firmware 8 records HIGH Br-6208ac Firmware 6 records HIGH Br-6476ac Firmware 5 records HIGH Gs-5008pl Firmware 5 records MEDIUM Br-6428ns Firmware 4 records HIGH Ic-3140w Firmware 4 records MEDIUM

Records

159 records

TI-2025-01129 CVE-2025-1316 · GHSA-gjfw-29fg-w4vq

Edimax IC-7100 IP Camera OS Command Injection

CRITICAL 99KEV

Edimax IC-7100 does not properly neutralize requests.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.74482 Published 2025-03-04 No fix listed CWE-78

TI-2026-85269 CVE-2026-122051 · GHSA-3r8p-4pf8-9jq4

Edimax BR-6208AC mp command injection

HIGH 82

A flaw has been found in Edimax BR-6208AC 1.32.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02575 Published 2026-11-04 No fix listed CWE-74

TI-2026-71231 CVE-2026-108918 · GHSA-x6qv-gj4w-78gc

Command injection in Edimax BR-6208AC via formWlanMP

HIGH 82

A vulnerability was identified in Edimax BR-6208AC 1.32.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02028 Published 2026-10-12 No fix listed CWE-74

TI-2026-71230 CVE-2026-108917 · GHSA-jm9w-v357-jj5j

Command injection in Edimax BR-6208AC via tftpsIP argument

HIGH 82

A vulnerability was determined in Edimax BR-6208AC 1.32.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01989 Published 2026-10-12 No fix listed CWE-74

TI-2025-28873 CVE-2025-45857 · GHSA-q3wm-48q6-668m

EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE)…

HIGH 82

EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01078 Published 2025-05-13 No fix listed CWE-94

TI-2025-20734 CVE-2025-28146 · GHSA-q7wx-4c6m-pm7w

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to…

HIGH 82

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11478 Published 2025-04-04 No fix listed CWE-94

TI-2025-16773 CVE-2025-22916 · GHSA-c7pw-v853-4qp9

RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.

HIGH 82

RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00653 Published 2025-01-16 No fix listed CWE-120

TI-2025-16772 CVE-2025-22913 · GHSA-4q3j-cpv6-g583

RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.

HIGH 82

RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00801 Published 2025-01-16 No fix listed CWE-120

TI-2025-16771 CVE-2025-22912 · GHSA-3jfq-4f5c-mp6v

RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.

HIGH 82

RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01989 Published 2025-01-16 No fix listed CWE-77

TI-2025-16769 CVE-2025-22907 · GHSA-vcjx-5pw3-c283

RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.

HIGH 82

RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00653 Published 2025-01-16 No fix listed CWE-120

TI-2025-16768 CVE-2025-22906 · GHSA-8wj4-7hpq-qj4h

RE11S v1.11 was discovered to contain a command injection vulnerability via the…

HIGH 82

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02327 Published 2025-01-16 No fix listed CWE-94

TI-2025-16767 CVE-2025-22905 · GHSA-jqw4-2625-36jw

RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.

HIGH 82

RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04713 Published 2025-01-16 No fix listed CWE-94

TI-2025-16766 CVE-2025-22904 · GHSA-8pjp-75pp-w83h

RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.

HIGH 82

RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00653 Published 2025-01-16 No fix listed CWE-120

TI-2023-15301 CVE-2023-31986 · GHSA-9j79-q2c6-v5v7

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4…

HIGH 82

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08184 Published 2023-05-15 No fix listed CWE-77

TI-2023-15300 CVE-2023-31985 · GHSA-hqm6-wfjh-9325

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4…

HIGH 82

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08078 Published 2023-05-12 No fix listed CWE-77

TI-2023-15299 CVE-2023-31983 · GHSA-h4w6-443w-q3c4

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4…

HIGH 82

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24902 Published 2023-05-12 No fix listed CWE-77

TI-2020-19260 CVE-2020-37125 · GHSA-8mfp-f74j-7vph

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution

HIGH 81

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06977 Published 2026-02-05 No fix listed CWE-78

TI-2020-19285 CVE-2020-37150 · GHSA-88qp-q3xw-v38x

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure

HIGH 77

Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and security key.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00786 Published 2026-02-05 No fix listed CWE-201

TI-2026-71217 CVE-2026-108915 · GHSA-98f9-ggg7-m2px

Buffer overflow in Edimax BR-6208AC formWlanMP handler

HIGH 76

A vulnerability has been found in Edimax BR-6208AC 1.32.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00445 Published 2026-10-12 No fix listed CWE-119

TI-2026-71216 CVE-2026-108914 · GHSA-2xrv-gr5x-xvx9

Buffer overflow in Edimax BR-6208AC formWlSiteSurvey handler

HIGH 76

A flaw has been found in Edimax BR-6208AC 1.32.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00567 Published 2026-10-12 No fix listed CWE-119

TI-2026-16182 CVE-2026-19961 · GHSA-3xmw-9fqv-62rq

Edimax EW-7478APC formWlSiteSurvey buffer overflow

HIGH 76

A vulnerability was detected in Edimax EW-7478APC 1.04.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00805 Published 2026-08-16 No fix listed CWE-119

TI-2026-16180 CVE-2026-19959 · GHSA-xfm9-p773-w7h2

Edimax EW-7478APC formWanTcpipSetup stack-based overflow

HIGH 76

A weakness has been identified in Edimax EW-7478APC 1.04.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00805 Published 2026-08-16 No fix listed CWE-119

TI-2026-11506 CVE-2026-13583 · GHSA-r8ch-529w-3cmj

Edimax EW-7478APC POST Request formUSBFolder buffer overflow

HIGH 73

A vulnerability has been found in Edimax EW-7478APC 1.04.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00805 Published 2026-06-29 No fix listed CWE-119

TI-2026-11505 CVE-2026-13582 · GHSA-9gmf-7v9v-p9h8

Edimax EW-7478APC POST Request formUSBAccount buffer overflow

HIGH 73

A flaw has been found in Edimax EW-7478APC 1.04.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00805 Published 2026-06-29 No fix listed CWE-119

TI-2026-11503 CVE-2026-13580 · GHSA-jv8x-v9mq-9q74

Edimax EW-7478APC POST Request formQoS buffer overflow

HIGH 73

A security vulnerability has been detected in Edimax EW-7478APC 1.04.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00805 Published 2026-06-29 No fix listed CWE-119

Open these records in search →