The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6476AC allows a hacker to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6476AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...

CVE-2024-48420

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic...

CVE-2024-48417

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting XSS in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter...

CVE-2024-48416: Buffer Copy without Checking Size of Input

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanDhcpsClientbinding...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which stems from a command injection issue that allows an attacker to execute arbitrary shell commands with root privileges...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which originates from a buffer overflow attack via /goform/getWifiBasic...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in the Edimax BR-6476AC version 1.06, which stems from /goform/fromSetDDNS does not properly handle special characters entered by the user, allowing an attacker to inject and execute arbitrary shell...

CVE-2024-48417: Improper Neutralization of Input During Web Page Generation

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting XSS in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which originates from a buffer overflow attack via /goform/fromSetLanDhcpsClientbinding...

CVE-2024-48418: Cross-Site Request Forgery (CSRF)

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands...

CVE-2024-48419: Improper Neutralization of Special Elements used in a Command

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an attacker with access t...

CVE-2024-48420: Buffer Copy without Checking Size of Input

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which stems from vulnerability to cross-site scripting attacks...