CVE-2024-48419: edimax br-6476ac_firmware Command Injection

Vulnerability summary

CVE-2024-48419 is a high (CVSS 8.8) Command Injection vulnerability in edimax br-6476ac_firmware. EPSS estimates a 5.36% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 27-01-2025
   PublishedVulnerability first disclosed.
2. 05-07-2026
   Last modifiedVulnerability information updated.

Description

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an attacker with access to the web interface to inject and execute arbitrary shell commands, with "root" privileges.

• CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.