CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

The Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 is vulnerable to a command injection vulnerability. The root cause is a failure to neutralize special characters in the fota_url parameter within the formLtefotaUpgradeQuectel function of the microprogrammed routing software. A...