EDIMAX Technology EW-7438RPn Mini vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting EDIMAX Technology EW-7438RPn Mini: 4 record(s), with affected versions and fixes.

CVE-2020-37149 High · 8.8 CWE-352 Feb 5, 2026

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution

Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An attacker can trick an authenticated user into submitting a crafted form to the /goform/mp endpoint, resulting in arbitrary command execution on the device with the user's privileges.

CVE-2020-37125 Critical · 9.8 CWE-78 Feb 5, 2026

Edimax EW-7438RPn Mini Firmware OS Command Injection

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint. Attackers can exploit the vulnerability by sending crafted POST requests with command injection payloads to download and execute malicious scripts on the device.

CVE-2020-37097 High · 7.5 CWE-522 Feb 3, 2026

Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.

CVE-2020-37096 Medium · 4.3 CWE-352 Feb 3, 2026

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.