CVE-2025-15256

🗓️ 30 Dec 2025 16:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

Edimax BR-6208AC remote command injection via formStaDrvSetup; device end of life.

Reporter	Title	Published	Views	Family All 7
CNNVD	Edimax BR-6208AC 安全漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-15256 Edimax BR-6208AC Web-based Configuration formStaDrvSetup command injection	30 Dec 202516:32	–	cvelist
EUVD	EUVD-2025-205807	30 Dec 202518:30	–	euvd
NVD	CVE-2025-15256	30 Dec 202517:15	–	nvd
Positive Technologies	PT-2025-54192	30 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-15256	31 Dec 202517:06	–	redhatcve
Vulnrichment	CVE-2025-15256 Edimax BR-6208AC Web-based Configuration formStaDrvSetup command injection	30 Dec 202516:32	–	vulnrichment

NVD

Vulners

Node

edimax br-6208ac_firmwareMatch1.02

edimax br-6208ac_firmwareMatch1.03

AND

edimax br-6208acMatch2.0

[
  {
    "vendor": "Edimax",
    "product": "BR-6208AC",
    "versions": [
      {
        "version": "1.02",
        "status": "affected"
      },
      {
        "version": "1.03",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:edimax:br-6208ac_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Web-based Configuration Interface"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
tzh00203	www.tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Command-Injection-Vulnerability-in-Web-formStaDrvSetup-handler-2d2b5c52018a803ebd91c200b3e2925b
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tzh00203	www.tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Command-Injection-Vulnerability-in-Web-formStaDrvSetup-handler-2d2b5c52018a803ebd91c200b3e2925b

Parameter	Position	Path	Description	CWE
rootAPmac	request body	/goform/formStaDrvSetup	Command injection via manipulation of rootAPmac in formStaDrvSetup (Web-based Configuration Interface).	CWE-74, CWE-77

29 Apr 2026 01:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.3 - 9.8

CVSS 46.9

CVSS 27.5

CVSS 37.3

EPSS0.00193

SSVC