Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-70161 EUVD-2026-1713GHSA-44vp-c93r-6656

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell comman…

Published Jan 9, 2026 · Updated Jan 12, 2026 · Assigned by mitre

Description

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

References