Edimax vulnerabilities
We track 76 vulnerabilities in Edimax products across 25 products. 76 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 14, 2026.
Latest Edimax vulnerabilities
- 9.9 Critical severity
BR6478ACV2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax BR6478ACV2 1.23. The impacted element is the function formPPTPSetup of the file webs. The manipulation of the argument pptpUserName leads to buffer overflow. It is possible to initiate the attack remotely. T
- 10.0 Critical severity
BR-6208AC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and m
- 10.0 Critical severity
BR-6208AC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicl
- 10.0 Critical severity
BR-6208AC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote.
- 8.3 High severity
BR-6208AC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. Th
- 9.9 Critical severity
BR-6208AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the p
- 9.9 Critical severity
BR-6208AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The explo
- 7.4 High severity
EW-7478APC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exp
- 7.4 High severity
EW-7478APC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be p
- 9.9 Critical severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remot
- 7.4 High severity
EW-7478APC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploi
- 9.9 Critical severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manipulation of the argument ShareName/SelectName leads to buffer overflow. The attac
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. Remote exploitation of
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in stack-based buffer overflow.
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to stack-based buffer overflow. It i
- 8.8 High severity
EW-7478APC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. It is possible to init
- 8.8 High severity
BR-6478AC V2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to stack-based buff
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation of the argument ShareName/SelectName results in buffer overflow. The attack can
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remot
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID results in buffer overflow. The attack can
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to stack-based b
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax EW-7438RPn 1.31. This impacts the function formSDHCP of the file /goform/formSDHCP. Such manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7438RPn 1.31. This affects the function formStats of the file /goform/formStats. This manipulation of the argument submit-url causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publ
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack re
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate t
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7438RPn 1.31. Affected by this issue is the function formLicence of the file /goform/formLicence. This manipulation of the argument submit-url causes stack-based buffer overflow. The attack may be initiated remotely. The expl
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack can
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. Affected is the function formRadius of the file /goform/formRadius. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be initiated remotely. Th
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. It is possible to launch the attack remo
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Edimax EW-7438RPn 1.31. This affects the function formConnectionSetting of the file /goform/formConnectionSetting. Performing a manipulation of the argument max_Conn/timeOut results in stack-based buffer overflow. It is p
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax BR-6478AC 1.23. This vulnerability affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. The manipulation of the argument L2TPUserName leads to buffer ov
- 8.8 High severity
BR-6478AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipulation of the argument selSSID can lead to buffer overflow. Th
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7438RPn 1.31. This impacts the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component webs. This manipulation of the argument selSSID/submit-url causes stack-based buffer overflow. The attack is possi
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax EW-7438RPn 1.31. This affects the function formHwSet of the file /goform/formHwSet. The manipulation of the argument Anntena/Mcs/regDomain/nic0Addr/nic1Addr/wlanAddr/wanAddr/wlanSSID/wlanChan/initgain/txcck/txofdm/submit-
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The impacted element is the function formWlanMP of the file /goform/formWlanMP. The manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The att
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to buffer overflow. The attack c