Edimax vulnerabilities
156 vulnerabilities
Known vulnerabilities in Edimax products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 35 products.
Products
35- EW 7438Rpn24 vulnerabilities
- BR 6208Ac17 vulnerabilities
- EW 7478Apc14 vulnerabilities
- Br 6478Ac12 vulnerabilities
- BR 6675Nd12 vulnerabilities
- Br 6428Ns11 vulnerabilities
- Br 6478Ac V38 vulnerabilities
- Ew 7438Rpn Mini8 vulnerabilities
- Re11S8 vulnerabilities
- Br 6476Ac5 vulnerabilities
- BR 6478Ac V25 vulnerabilities
- Gs 5008Pl5 vulnerabilities
- BR 6428Nc4 vulnerabilities
- Ic 3140W4 vulnerabilities
- Br 6208Ac V13 vulnerabilities
- Br 6288Acl3 vulnerabilities
- 6114Wg2 vulnerabilities
- 6114Wg Router2 vulnerabilities
- Br 6104K2 vulnerabilities
- Br 6104K Router2 vulnerabilities
- BR 6214K2 vulnerabilities
- Edimax EW 7438Rpn Mini2 vulnerabilities
- Full Rate Adsl Router2 vulnerabilities
- Ic 5150W2 vulnerabilities
- Ic 6220Dc2 vulnerabilities
- 7237Rpd1 vulnerabilities
- BR 6228Nc1 vulnerabilities
- Br 6258N1 vulnerabilities
- Br 6473Ax1 vulnerabilities
- Cv 7428Ns1 vulnerabilities
- Edimax Ew 7438Rpn V21 vulnerabilities
- Ic 3116W1 vulnerabilities
- IC 7100 IP Camera1 vulnerabilities
- Br 6104K0 vulnerabilities
- Ic 71000 vulnerabilities
CVE-2026-108915edimaxbr-6208ac
EPSS score0.45%
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2026-108918edimaxbr-6208acEPSS score2.03%
A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2026-108933edimaxbr-6208acEPSS score0.20%
A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2026-108935edimaxbr-6208acEPSS score0.25%
A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2026-108914edimaxbr-6208acEPSS score0.57%
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2026-108936edimaxbr-6208acEPSS score0.20%
A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2026-108917edimaxbr-6208acEPSS score1.99%
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2026-108934edimaxbr-6208acEPSS score0.20%
A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2026-108916edimaxbr-6208acEPSS score1.66%
A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2018-10569edimaxedimax_ew-7438rpn_v2_firmwareEPSS score0.90%
An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field.CVE-2018-8072edimaxic-3140w_firmware+2EPSS score2.75%
An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUE_HERE HTTP request: if the VALUE_HERE length is more than 0x400 (1024), it is possible to overwrite other values located on the stack due to an incorrect use of the strcpy() function.CVE-2021-40597edimaxic-3140w_firmwareEPSS score2.07%
The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.CVE-2021-30165edimax technology co., ltd.ic-3140w+1EPSS score1.07%
The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices.CVE-2016-10863edimax7237rpd_firmware+1EPSS score0.62%
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.CVE-2025-1612edimaxbr-6288acl_firmwareEPSS score0.45%
A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2025-1316edimaxic-7100 ip cameraKEVEPSS score74.48%
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the deviceCVE-2025-14094edimaxbr-6478ac_v3_firmwareEPSS score20.32%
A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2025-14910edimaxbr-6208acEPSS score0.53%
A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is no longer available in the market and has been discontinued for five years. Consequently, Edimax no longer provides technical support, firmware updates, or security patches for this specific model. However, to ensure the safety of our remaining active users, we acknowledge this report and will take the following mitigation actions: (A) We will issue an official security advisory on our support website. (B) We will strongly advise users to disable the FTP service on this device to mitigate the reported risk, by which the product will still work for common use. (C) We will recommend users upgrade to newer, supported models." This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-14093edimaxbr-6478ac_v3_firmwareEPSS score19.57%
A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2025-14092edimaxbr-6478ac_v3_firmwareEPSS score16.92%
A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.