CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

CVE-2025-28146 affects Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 running 1.0.15. The issue is a command-injection via the fota_url parameter in the /boafrm/formLtefotaUpgradeQuectel API endpoint. According to the sources, this could be exploited with a PoC and is rated CRITICAL (...