Read the docs

Edimax

Records159All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high62CVSS 7.0–8.9

Exploited now

Edimax records in CISA KEV
TI-2025-01129 Edimax IC-7100 IP Camera OS Command Injection Vulnerability Priority CRITICAL 99KEV 2025-03-19

Components

Products in the NVD configurations · select one to filter the records
Br-6478ac V3 Firmware 8 records HIGH Ew-7438rpn Mini Firmware 8 records HIGH Re11s Firmware 8 records HIGH Br-6208ac Firmware 6 records HIGH Br-6476ac Firmware 5 records HIGH Gs-5008pl Firmware 5 records MEDIUM Br-6428ns Firmware 4 records HIGH Ic-3140w Firmware 4 records MEDIUM

Records

5 records in Gs-5008pl Firmware · all components

TI-2026-25304 CVE-2026-32841 · GHSA-87wq-4q6j-76w5

Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients

Priority MEDIUM 43

Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0062 Published 2026-03-17 No fix listed CWE-1108
TI-2026-25305 CVE-2026-32842 · GHSA-2f9j-ff2q-8qmx

Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext

Priority LOW 31

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0022 Published 2026-03-17 No fix listed CWE-312
TI-2026-25303 CVE-2026-32840 · GHSA-mgcj-3w53-qpg2

Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name

Priority LOW 23

Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00228 Published 2026-03-17 No fix listed CWE-79
TI-2026-25302 CVE-2026-32839 · GHSA-x57f-4q9r-qvpp

Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints

Priority LOW 23

Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to v…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-03-17 No fix listed CWE-352
Open these records in search →