CVE-2025-14093

Edimax BR-6478AC V3 firmware 1.0.15 contains an os command injection in sub_416990 of /boafrm/formTracerouteDiagnosticRun, triggered by manipulating the host argument. It is exploitable remotely and the exploit is public. Red Hat notes vendor non-response; PT Security and others corroborate the i...

CVE-2025-14093 Edimax BR-6478AC V3 formTracerouteDiagnosticRun sub_416990 os command injection

A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. Th...