Edimax

Records159All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

Edimax records in CISA KEV

TI-2025-01129 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CRITICAL 99KEV 2025-03-19

Components

Products in the NVD configurations · select one to filter the records

Br-6478ac V3 Firmware 8 records HIGH Ew-7438rpn Mini Firmware 8 records HIGH Re11s Firmware 8 records HIGH Br-6208ac Firmware 6 records HIGH Br-6476ac Firmware 5 records HIGH Gs-5008pl Firmware 5 records MEDIUM Br-6428ns Firmware 4 records HIGH Ic-3140w Firmware 4 records MEDIUM

Records

8 records in Ew-7438rpn Mini Firmware · all components

TI-2020-19260 CVE-2020-37125 · GHSA-8mfp-f74j-7vph

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution

HIGH 81

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06977 Published 2026-02-05 No fix listed CWE-78

TI-2020-19285 CVE-2020-37150 · GHSA-88qp-q3xw-v38x

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure

HIGH 77

Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and security key.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00786 Published 2026-02-05 No fix listed CWE-201

TI-2020-19231 CVE-2020-37096 · GHSA-gjcm-5wgj-fj7j

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

MEDIUM 62

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00177 Published 2026-02-03 No fix listed CWE-352

TI-2020-19284 CVE-2020-37149 · GHSA-4j57-5g6c-2wj3

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution

MEDIUM 56

Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00352 Published 2026-02-05 No fix listed CWE-352

TI-2025-24198 CVE-2025-34029 · GHSA-67j5-v3fg-v9wq

Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp

MEDIUM 55

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.03507 Published 2025-06-20 No fix listed CWE-78

TI-2025-24193 CVE-2025-34024 · GHSA-6jw4-m8h9-g536

Edimax EW-7438RPn Mini OS Command Injection via mp.asp

MEDIUM 55

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.039 Published 2025-06-20 No fix listed CWE-78

TI-2020-19232 CVE-2020-37097 · GHSA-cvfp-9537-pwmr

Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)

MEDIUM 44

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00458 Published 2026-02-03 No fix listed CWE-522

TI-2016-08901 CVE-2016-10863 · GHSA-39w3-4jjr-jvr8

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.

LOW 39

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00624 Published 2019-08-08 No fix listed CWE-352

Open these records in search →