Command injection

2023-05-1512:15:00

PRIOn knowledge base

www.prio-n.com

command injection

edimax

n300

router

firmware

br-6428ns_v4

setwan function

arbitrary code

security vulnerability

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.

CPENameOperatorVersion
br-6428ns_firmwareeq1.10

CPE	Name	Operator	Version
	br-6428ns_firmware	eq	1.10

References

github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/4/Readme.md