Lucene search
+L

7 matches found

Cvelist
Cvelist
•added 2025/06/20 6:38 p.m.•33 views

CVE-2025-34029 Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell...

9.4CVSS0.03424EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•7 views

CVE-2025-34029: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell...

9.4CVSS6.1AI score0.03424EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•17 views

Edimax EW-7438RPn Mini 安全漏洞

The Edimax EW-7438RPn Mini is a small wireless signal extender from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax EW-7438RPn Mini version 1.13 and earlier, which originates from the syscmd.asp form processor exposing the system command interface,...

9.4CVSS7.2AI score0.03424EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/04/23 12:00 a.m.•17 views

PT-2025-26461 · Edimax · Edimax Ew-7438Rpn Mini

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn Mini firmware versions 1.13 and prior Description: A remote authenticated attacker can exploit an OS command injection issue via the syscmd.asp form handler, specifically through the "sysCmd" parameter in the...

9.4CVSS7.4AI score0.03424EPSS
SaveExploits1References9
CNVD
CNVD
•added 2018/08/15 12:00 a.m.•19 views

Edimax EW-7438RPn Mini Cross-Site Scripting Vulnerability

Edimax EW-7438RPn Mini is a wireless router product from Edimax Technology. A cross-site scripting vulnerability exists in the SSID field in the Edimax EW-7438RPn Mini v2 prior to version 1.26. A remote attacker can exploit this vulnerability to perform a phishing attack...

6.1CVSS6AI score0.00897EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/13 12:00 a.m.•7 views

CVE-2018-10569: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

6.1CVSS6.3AI score0.00897EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/08/13 12:00 a.m.•10 views

PT-2018-9967

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn Mini version prior to 1.26 Description: An issue was discovered in the Edimax EW-7438RPn Mini, where there is a cross-site scripting XSS vulnerability in an SSID field. Recommendations: For versions prior to 1.26, update to...

6.1CVSS0.00897EPSS
SaveExploits0References4
Rows per page
Query Builder