CVE-2024-48420

The Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC (version 1.06 ) is vulnerable to a Buffer Overflow via the /goform/getWifiBasic API endpoint. This vulnerability is characterized as a Buffer Copy without Checking Size of Input (CWE-120). An attacker could potentially exploit this overflow to ...

PT-2025-2797

Name of the Vulnerable Software and Affected Versions: Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 Description: The issue is related to a buffer overflow that can occur through the /goform/getWifiBasic API endpoint. This endpoint is vulnerable to a buffer overflow, which can be...

CVE-2024-48418

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands...

CVE-2024-48418

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands...

Edimax BR-6476AC security vulnerabilities

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which stems from vulnerability to cross-site scripting attacks...

CVE-2024-48418

The Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC (version 1.06 ) is vulnerable to arbitrary shell command injection via the /goform/fromSetDDNS request. The root cause is the incorrect processing of special characters in user-provided parameters, which allows an attacker with web interface ac...

PT-2025-2795

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wi-Fi 5 BR-6476AC version 1.06 Description The issue is related to a buffer overflow due to the lack of input size validation. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary commands...

PT-2024-10391

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 Description The issue concerns the request /goform/fromSetDDNS not properly handling special characters in user-provided parameters, allowing an attacker with access to the web...

CVE-2023-31986

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations...

CVE-2023-31986

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations...

CVE-2023-31986

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations...

CVE-2023-31985

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations...

CVE-2023-31985

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations...

CVE-2023-31983

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations...

Edimax BR-6208AC Cross-Router Covert Channel Vulnerability (CNVD-2019-30063)

The Edimax BR-6208AC is a wireless concurrent dual-band router. A cross-router hidden channel vulnerability exists in the Edimax BR-6208AC V1. The vulnerability stems from insufficient isolation between host and client networks established by the same device. An attacker could exploit the...

Edimax BR-6208AC Cross-Router Covert Channel Vulnerability (CNVD-2019-30061)

The Edimax BR-6208AC is a wireless concurrent dual-band router. A cross-router hidden channel vulnerability exists in the Edimax BR-6208AC V1. The vulnerability stems from insufficient isolation between host and client networks established by the same device. The vulnerability can be exploited by...

Edimax AR-7084GA Router CSRF + Persistent XSS Exploit

No description provided by source. ?php / Edimax AR-7084GA Router CSRF + Persistent XSS Exploit Firmware version: 2.9.8.1RUE0.C2A3.7.6.1 Vulnerable page: http://xx.xx.xx.xx/advanced/advnatvirsvr.htm Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co....

Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting

Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting 25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1...

Edimax AR-7084GA Router - Cross-Site Request Forgery / Persistent Cross-Site Scripting

25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1" name="VIRTUALSVRform"...

CVE-2004-1791

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access...