Edimax vulnerabilities
We track 76 vulnerabilities in Edimax products across 25 products. 76 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 14, 2026.
Latest Edimax vulnerabilities
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax BR-6675nD 1.12. This vulnerability affects the function formsetPPPoE of the file /goform/formsetPPPoE of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in buffer overflow
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Executing a manipulation of the argument pptpUserName can lead to buffer overflow. The
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in buff
- 8.8 High severity
BR-6675nD: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The at
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this issue is the function formwlencrypt24g of the file /goform/formwlencrypt24g of the component POST Request Handler. The manipulation of the argument key1 results in buffer overflow
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of the file /goform/mp of the component webs. The manipulation of the argument webs results in stack-based buffer overflow. It is possible to
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be perfo
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipulation of the argument ssid/manualssid/ip/mask/gateway results in buffer overflow.
- 8.8 High severity
EW-7438RPn: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such manipulation of the argument pinCode/wlan-url leads to stack-based buffer overf
- 8.8 High severity
BR-6428NS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipulation of the argument vapurl results in buffer overflow. The
- 8.8 High severity
BR-6428NS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to buffer overflow.
- 8.8 High severity
BR-6428NS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow. It
- 8.8 High severity
BR-6428NS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow. It is possible to initiate t
- 8.8 High severity
BR-6208AC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway results in buffer overflow. The attack may be initiated remotely. The exploit is no
- 8.8 High severity
BR-6428nC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway leads to buffer overflow. The attack can be launched remotely. The exploit h
- 8.1 High severity
Edimax GS-5008PL: Excessive Reliance on Global Variables
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative
- 7.5 High severity
BR-6208AC: Use of Default Credentials
A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploi
- 9.8 Critical severity
Br-6208ac Firmware: Improper Neutralization of Special Elements used in a Command
EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands int
- 9.8 Critical severity
BR-6208AC: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGate
- 9.8 Critical severity
BR-6208AC: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection
- 9.8 Critical severity
BR-6478AC V3: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has bee
- 9.8 Critical severity
BR-6478AC V3: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exp
- 7.2 High severity
BR-6478AC V3: Improper Neutralization of Special Elements used in an OS Command
A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated re
- 8.0 High severity
Br-6473ax Firmware: Improper Neutralization of Special Elements used in a Command
Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter in the openwrt_getConfig function.
- 8.8 High severity
Edimax EW-7438RPn Mini: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated
- 8.8 High severity
Edimax EW-7438RPn Mini: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject she
- 9.8 Critical severity
Br-6478ac V3 Firmware: Improper Control of Generation of Code
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel
- 9.8 Critical severity
Edimax IC-7100 IP Camera OS Command Injection Exploited
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device
- 8.8 High severity
Br-6476ac Firmware: Improper Neutralization of Special Elements used in a Command
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these is
- 8.8 High severity
Br-6476ac Firmware: Cross-Site Request Forgery
In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shel
- 9.8 Critical severity
IC-6220DC: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcam_cgi. The manipulation of the argument host leads to command injection. NOTE: The vendor
- 9.8 Critical severity
Br-6478ac Firmware: Out-of-bounds Write
A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy() function.
- 9.8 Critical severity
Br-6428ns Firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.
- 9.8 Critical severity
Br-6428ns Firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.
- 9.8 Critical severity
Br-6428ns Firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations.
- 8.8 High severity
Br-6428ns Firmware: Improper Neutralization of Special Elements used in an OS Command
Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.