EDIMAX BR-6208AC Buffer Error Vulnerability

The EDIMAX BR-6208AC is a wireless broadband router produced by Edimax Corporation of Taiwan. Versions of the Edimax BR-6208AC prior to 1.02 contained a buffer overflow vulnerability. This vulnerability stemmed from an unknown function in the file/goform/setWAN, which handled the parameter...

PT-2026-36675

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC versions prior to 1.02 Description A buffer overflow can be triggered remotely via a manipulation of the pptpDfGateway argument within an unknown function of the '/goform/setWAN' file. Recommendations At the moment, there is n...

PT-2026-36674

Name of the Vulnerable Software and Affected Versions Edimax BR-6428nC versions prior to 1.17 Description A buffer overflow can be triggered remotely via an unknown function within the '/goform/setWAN' endpoint. This occurs through the manipulation of the pptpDfGateway argument. Recommendations A...

PT-2026-42894

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.32 Description A stack-based buffer overflow can be executed remotely via the webs component. The issue exists in an unknown function within the '/goform/formWpsStart' endpoint when manipulating the...

PT-2026-42900

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.32 Description A buffer overflow can be triggered remotely within the webs component. The issue exists in the formWizSurvey function located in the '/goform/formWizSurvey' endpoint. This occurs when...

PT-2026-42902

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.31 Description Remote OS command injection is possible within the webs component. The issue exists in the formWizSurvey function located in the '/goform/formWizSurvey' endpoint. Manipulation of the...

PT-2026-42893

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.31 Description An OS command injection flaw exists in the webs component. The issue occurs within the formWpsStart function located in the '/goform/formWpsStart' endpoint when processing the pinCode...

PT-2026-43100

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.31 Description A stack-based buffer overflow occurs in the formLogout function within the '/goform/formLogout' endpoint. This issue is triggered by the manipulation of the submit-url argument, which can allow a remo...

PT-2026-42874

Name of the Vulnerable Software and Affected Versions Edimax BR-6428NS version 1.10 Description An issue in the POST Request Handler component allows remote command injection. This occurs through the manipulation of multiple arguments, including ateFunc, ateGain, ateTxCount, ateChan, ateRate,...

PT-2026-42875

Name of the Vulnerable Software and Affected Versions Edimax BR-6428NS version 1.10 Description Command injection is possible via a remote attack in the POST Request Handler component. The issue exists within the formWlbasic function located in the /goform/formWlbasic file, where improper...

routing system() Privilege Escalation

The vulnerability of the system function in microprogrammed routing devices like EDIMAX BR-6208AC lies in the lack of measures taken to clean data at the control level when processing the parameter pppUserName. Exploiting this vulnerability can allow a malicious actor to enhance their privileges...

CVE-2026-32840

Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the systemnameset.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName parameter. Attackers can send a crafted POST request with malicious script...

CVE-2026-32839

Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to visit malicious pages. Attackers can exploit the lack of anti-CSRF tokens and...

CVE-2026-32842

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username...

CVE-2026-32838

Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data...

CVE-2026-32841

Edimax GS-5008PL firmware version 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any...

EDIMAX GS-5008PL Unauthenticated Access

The vulnerability of the web-based interface for controlling microprogrammed software in EDIMAX GS-5008PL switches lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...

EDIMAX GS-5008PL Manipulation Inter-site Request

The vulnerability of the microprogrammed software of the EDIMAX GS-5008PL switches is related to the possibility of manipulating inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify passwords, restart the device, and reset...

EDIMAX GS-5008PL Global Variable Access

The vulnerability of the microprogrammed software of the EDIMAX GS-5008PL switches is related to their excessive dependence on global variables. Exploiting this vulnerability can allow a malicious actor to gain access to the control interface remotely...

EDIMAX GS-5008PL Switch System Name Set CGI Code Execution

The vulnerability in the systemnameset.cgi script of the EDIMAX GS-5008PL microcontroller software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...