Description
Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint. Attackers can exploit the vulnerability by sending crafted POST requests with command injection payloads to download and execute malicious scripts on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EDIMAX Technology | EW-7438RPn Mini | 1.27 | — |
References
- ExploitDB-48318 exploit
- Edimax EW-7438RPn Mini Product Page product
- VulnCheck Advisory: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution third-party-advisory