edimax Vulnerability Advisory Catalog

Total 66 security vulnerabilities recorded for edimax software and firmware.

← Back to All Vendors
CVE-2025-45857 CRITICAL
Component: cv-7428ns_firmware

EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function....

📅 2025-05-13
CVSS 9.8 Dossier →
Component: re11s_firmware

RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function....

📅 2025-04-15
CVSS 5.6 Dossier →
Component: br-6478ac_v3_firmware

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm...

📅 2025-04-15
CVSS 6.5 Dossier →
Component: br-6478ac_v3_firmware

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in th...

📅 2025-04-15
CVSS 6.5 Dossier →
Component: br-6478ac_v3_firmware

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupname at the...

📅 2025-04-15
CVSS 6.5 Dossier →
Component: br-6478ac_v3_firmware

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the foldername in /b...

📅 2025-04-15
CVSS 6.5 Dossier →
CVE-2025-28146 CRITICAL
Component: br-6478ac_v3_firmware

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/...

📅 2025-04-04
CVSS 9.8 Dossier →
CVE-2025-1316 CRITICAL
Component: ic-7100_firmware

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...

📅 2025-03-05
CVSS 9.8 Dossier →
Component: br-6288acl_firmware

A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless...

📅 2025-02-24
CVSS 3.5 Dossier →
Component: br-6476ac_firmware

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic....

📅 2025-01-27
CVSS 8.8 Dossier →
Component: br-6476ac_firmware

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be trigger...

📅 2025-01-27
CVSS 8.8 Dossier →
Component: br-6476ac_firmware

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user p...

📅 2025-01-27
CVSS 8.8 Dossier →
Component: br-6476ac_firmware

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting (XSS) in : /bin/goahead via /goform/setStaticRoute, /gofor...

📅 2025-01-27
CVSS 5.2 Dossier →
Component: br-6476ac_firmware

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanDhcpsClientbinding....

📅 2025-01-27
CVSS 8.8 Dossier →
CVE-2025-22916 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22913 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22912 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22907 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22906 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22905 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2025-22904 CRITICAL
Component: re11s_firmware

RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-7616 MEDIUM
Component: ic-6220dc_firmware

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormSt...

📅 2024-08-12
CVSS 5.5 Dossier →
CVE-2023-49351 CRITICAL
Component: br-6478ac_firmware

A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other value...

📅 2024-01-16
CVSS 9.8 Dossier →
Component: br-6288acl_firmware

EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter....

📅 2023-05-31
CVSS 8.8 Dossier →
Page 2 of 3 (66 Total Records)