Vulnerabilidades do EDIMAX Technology EW-7438RPn Mini

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam EDIMAX Technology EW-7438RPn Mini: 4 registro(s), com versões afetadas e correções.

CVE-2020-37149 Alta · 8.8 CWE-352 05/02/2026

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution

Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An attacker can trick an authenticated user into submitting a crafted form to the /goform/mp endpoint, resulting in arbitrary command execution on the device with the user's privileges.

CVE-2020-37125 Crítica · 9.8 CWE-78 05/02/2026

Injeção de Comandos no SO no Firmware do Edimax EW-7438RPn Mini

Edimax EW-7438RPn-v3 Mini 1.27 contém uma vulnerabilidade de execução remota de código que permite a atacantes não autenticados executar comandos arbitrários por meio do endpoint /goform/mp. Atacantes podem explorar a vulnerabilidade enviando requisições POST elaboradas com payloads de injeção de comandos para baixar e executar scripts maliciosos no dispositivo.

CVE-2020-37097 Alta · 7.5 CWE-522 03/02/2026

Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.

CVE-2020-37096 Média · 4.3 CWE-352 03/02/2026

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.