CVE-2025-34024

🗓️ 20 Jun 2025 18:38:02Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 19 Views🌐 WEB

Vulnerability in Edimax EW-7438RPn allows command injection by authenticated attackers via mp.asp form.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-34024	20 Jun 202521:50	–	circl
CNNVD	Edimax EW-7438RPn 安全漏洞	20 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-34024 Edimax EW-7438RPn Mini OS Command Injection via mp.asp	20 Jun 202518:38	–	cvelist
EUVD	EUVD-2025-18776	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34024	20 Jun 202519:15	–	nvd
OSV	CVE-2025-34024	20 Jun 202519:15	–	osv
Positive Technologies	PT-2025-26460	23 Apr 202000:00	–	ptsecurity
RedhatCVE	CVE-2025-34024	23 Jun 202508:39	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-34024	20 Jun 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2025-34024 Edimax EW-7438RPn Mini OS Command Injection via mp.asp	20 Jun 202518:38	–	vulnrichment

NVD

Vulners

CNA

Node

edimax ew-7438rpn_mini_firmwareRange≤1.13

AND

edimax ew-7438rpn_miniMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web Management Interface (mp.asp command handler)"
    ],
    "product": "Edimax EW-7438RPn Mini",
    "vendor": "Edimax",
    "versions": [
      {
        "lessThanOrEqual": "1.13",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
broadcom	www.broadcom.com/support/security-center/attacksignatures/detail
exploit-db	www.exploit-db.com/exploits/48377
vulncheck	www.vulncheck.com/advisories/edimax-ew-7438rpn-command-injections
edimax	www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/

Parameter	Position	Path	Description	CWE
command	request body	/goform/mp	OS command injection via mp.asp form handler allowing attacker to execute shell commands as root by injecting shell metacharacters into the command parameter.	CWE-78

14 May 2026 02:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.8

CVSS 49.4

EPSS0.04316

SSVC

CWE-78