Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority HIGH 81

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06977 Published 2026-02-05 No fix listed CWE-78
Priority MEDIUM 44

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00458 Published 2026-02-03 No fix listed CWE-522
Priority MEDIUM 62

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00177 Published 2026-02-03 No fix listed CWE-352
Priority MEDIUM 55

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.03507 Published 2025-06-20 No fix listed CWE-78
Priority MEDIUM 55

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.039 Published 2025-06-20 No fix listed CWE-78