Description
Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EDIMAX Technology | EW-7438RPn Mini | 1.13 | — |
References
- ExploitDB-48365 exploit
- Edimax EW-7438RPn Product Homepage product
- VulnCheck Advisory: Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password) third-party-advisory