edimax vulnerabilities

Recent CVEs affecting edimax products. 46 tracked.

edimax has 46 tracked vulnerabilities, 12 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 20. Most recent: 2026-03-17. Highest priority: CVE-2025-1316 (score 92/100).

• CVE-2025-14092 MEDIUM 4.7 MITIGATE A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15
• CVE-2025-14093 MEDIUM 4.7 MITIGATE A vulnerability was detected in Edimax BR-6478AC V3 1.0.15
• CVE-2025-14094 MEDIUM 4.7 MITIGATE A flaw has been found in Edimax BR-6478AC V3 1.0.15
• CVE-2025-22916 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup fun
• CVE-2025-22912 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
• CVE-2025-22907 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey funct
• CVE-2025-22906 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /gof
• CVE-2025-22905 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/m
• CVE-2025-22904 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
• CVE-2024-48420 HIGH 8.8 MITIGATE Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasi
• CVE-2024-48419 HIGH 8.8 MITIGATE Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead
• CVE-2024-48418 HIGH 8.8 MITIGATE In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly ha
• CVE-2024-48417 MEDIUM 5.2 MITIGATE Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting (XSS) in : /bin/go
• CVE-2024-48416 HIGH 8.8 MITIGATE Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanD
• CVE-2026-32842 MEDIUM 6.5 UPGRADE Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that
• CVE-2026-32841 HIGH 8.1 UPGRADE Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allow
• CVE-2026-32840 MEDIUM 5.4 UPGRADE Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the
• CVE-2026-32839 MEDIUM 4.3 UPGRADE Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that al
• CVE-2026-32838 HIGH 7.5 UPGRADE Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface withou
• CVE-2026-1972 MEDIUM 5.3 UPGRADE A vulnerability was found in Edimax BR-6208AC 2_1.02
• CVE-2026-1971 LOW 2.4 UPGRADE A vulnerability has been found in Edimax BR-6288ACL up to 1.12
• CVE-2026-1970 LOW 3.5 UPGRADE A flaw has been found in Edimax BR-6258n up to 1.18
• CVE-2025-70161 CRITICAL 9.8 MITIGATE EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection
• CVE-2025-56706 HIGH 8.0 MITIGATE Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object
• CVE-2025-45857 CRITICAL 9.8 MITIGATE EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command pa
• CVE-2025-34029 HIGH 8.8 UPGRADE An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via
• CVE-2025-34024 HIGH 8.8 UPGRADE An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the
• CVE-2025-28146 CRITICAL 9.8 MITIGATE Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injectio
• CVE-2025-28145 MEDIUM 6.5 MITIGATE Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injectio
• CVE-2025-28144 MEDIUM 6.5 MITIGATE Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow v
• CVE-2025-28143 MEDIUM 6.5 MITIGATE Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injectio
• CVE-2025-28142 MEDIUM 6.5 MITIGATE Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injectio
• CVE-2025-22913 CRITICAL 9.8 MITIGATE RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup func
• CVE-2025-22911 MEDIUM 5.6 MITIGATE RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP fun
• CVE-2025-1612 LOW 3.5 MITIGATE A vulnerability was found in Edimax BR-6288ACL 1.30
• CVE-2025-1316 CRITICAL 9.8 EXPLOITED MITIGATE Edimax IC-7100 IP Camera OS Command Injection Vulnerability
• CVE-2025-15258 LOW 3.5 MITIGATE A weakness has been identified in Edimax BR-6208AC 1.02/1.03
• CVE-2025-15257 HIGH 7.3 MITIGATE A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03
• CVE-2025-15256 HIGH 7.3 MITIGATE A vulnerability was identified in Edimax BR-6208AC 1.02/1.03
• CVE-2025-14910 MEDIUM 4.3 MITIGATE A vulnerability was detected in Edimax BR-6208AC 1.02
• CVE-2024-7616 MEDIUM 5.5 UPGRADE UPGRADE A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06
• CVE-2020-37150 HIGH 7.5 MITIGATE Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unset
• CVE-2020-37149 HIGH 8.1 MITIGATE Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command exe
• CVE-2020-37125 CRITICAL 9.8 MITIGATE Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated atta
• CVE-2020-37097 HIGH 7.5 MITIGATE Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuratio
• CVE-2020-37096 MEDIUM 5.3 MITIGATE Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration

FAQ

How do I fix edimax vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is edimax being exploited right now?

Yes: 1 edimax CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which edimax CVE should I patch first?

CVE-2025-1316 currently ranks highest (92/100): Edimax IC-7100 IP Camera OS Command Injection Vulnerability.

Products

• br-6208ac firmware
• br-6258n firmware
• br-6288acl firmware
• br-6473ax firmware
• br-6476ac firmware
• br-6478ac v3 firmware
• cv-7428ns firmware
• ew-7438rpn mini firmware
• gs-5008pl firmware
• ic-5150w firmware
• ic-6220dc firmware
• ic-7100 firmware
• re11s firmware

RSS feed for edimax · ← Back to latest CVEs