Critical · 9.8 CVE-2023-31985 EUVD-2023-36274GHSA-hqm6-wfjh-9325

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the fo…

Published May 12, 2023 · Updated Jan 24, 2025 · Assigned by mitre

Description

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations.

References

https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/3/Readme.md