Edimax BR-6478AC 安全漏洞

Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. The Edimax BR-6478AC suffers from a command execution vulnerability that originates from the groupname parameter in /boafrm/formDiskCreateGroup failing to correctly filter construct command special characters, commands, etc...

CVE-2025-28145

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat...

PT-2025-16345

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC version V3 1.0.15 Description A command injection issue was discovered in the Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC. The issue occurs via the foldername in the...

Edimax Network Cameras Detection

Binary data edimaxnetworkcameradetected.nbin...

The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

The vulnerability of the formWlSiteSurvey function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formWlSiteSurvey function in the microprogrammed routing software EDIMAX RE11S lies in the copying of buffers without checking the size of the input data when processing the selSSID parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers lies in the copying of buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

PT-2025-14891 · Edimax · Edimax Ac1200 Wave 2 Dual-Band Gigabit Router Br-6478Ac V3

Name of the Vulnerable Software and Affected Versions: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 version 1.0.15 Description: A command injection issue was discovered via the fota url in the "/boafrm/formLtefotaUpgradeQuectel" API endpoint. This allows for potential exploitation. ...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

CVE-2025-28146 affects Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 running 1.0.15. The issue is a command-injection via the fota_url parameter in the /boafrm/formLtefotaUpgradeQuectel API endpoint. According to the sources, this could be exploited with a PoC and is rated CRITICAL (...

Edimax BR-6478AC 安全漏洞

Edimax BR-6478AC is a dual-band gigabit router from China Xunzhou Edimax. A security vulnerability exists in the Edimax BR-6478AC version 1.0.15, which stems from a command injection issue with the fotaurl parameter...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

Edimax Router Devices Default Credentials (HTTP)

The remote Edimax Router device is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Edimax IP Camera NTP_serverName command injection

Added: 03/21/2025 CVE: CVE-2025-1316 Background Edimax IP Cameras are a product line of security cameras which send video footage over an IP network. Problem A command injection vulnerability in the NTPserverName POST parameter of an update request allows remote attackers to execute arbitrary...

Edimax IP Camera NTP_serverName command injection

Added: 03/21/2025 CVE: CVE-2025-1316 Background Edimax IP Cameras are a product line of security cameras which send video footage over an IP network. Problem A command injection vulnerability in the NTPserverName POST parameter of an update request allows remote attackers to execute arbitrary...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-1316link is external Edimax IC-7100 IP Camera OS Command Injection Vulnerability CVE-2024-48248link is external NAKIVO Backup and Replication Absolute Path...

Edimax IC-7100 IP Camera OS Command Injection Vulnerability

Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue...