edimax Vulnerability Advisory Catalog

Total 66 security vulnerabilities recorded for edimax software and firmware.

← Back to All Vendors
CVE-2023-31986 CRITICAL
Component: br-6428ns_firmware

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN functi...

📅 2023-05-15
CVSS 9.8 Dossier →
CVE-2023-31983 CRITICAL
Component: br-6428ns_firmware

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function i...

📅 2023-05-12
CVSS 9.8 Dossier →
CVE-2023-31985 CRITICAL
Component: br-6428ns_firmware

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept fu...

📅 2023-05-12
CVSS 9.8 Dossier →
Component: br-6428ns_firmware

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via ...

📅 2023-02-07
CVSS 8.8 Dossier →
CVE-2021-40597 CRITICAL
Component: ic-3140w_firmware

The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password....

📅 2022-06-29
CVSS 9.8 Dossier →
Component: ic-3140w_firmware

The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain ...

📅 2021-04-27
CVSS 7.5 Dossier →
CVE-2020-26762 CRITICAL
Component: ic-3116w_firmware

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker...

📅 2020-12-01
CVSS 9.8 Dossier →
Component: br-6208ac_v1_firmware

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device....

📅 2019-08-27
CVSS 8.8 Dossier →
Component: br-6208ac_v1_firmware

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device....

📅 2019-08-27
CVSS 8.8 Dossier →
Component: br-6208ac_v1_firmware

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device....

📅 2019-08-27
CVSS 8.8 Dossier →
Component: ew-7438rpn_mini_firmware

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure....

📅 2019-08-08
CVSS 8.8 Dossier →
Component: edimax_ew-7438rpn_v2_firmware

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field....

📅 2018-08-13
CVSS 6.1 Dossier →
Component: ic-3140w_firmware

An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a st...

📅 2018-04-26
CVSS 8.8 Dossier →
CVE-2011-4502 UNKNOWN
Component: br-6104k_router_firmware

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.8...

📅 2011-11-22
CVSS 10.0 Dossier →
CVE-2011-4501 UNKNOWN
Component: br-6104k_router_firmware

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.8...

📅 2011-11-22
CVSS 10.0 Dossier →
CVE-2006-2561 UNKNOWN
Component: br_6104k

Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified In...

📅 2006-05-24
CVSS 7.5 Dossier →
CVE-2004-1791 UNKNOWN
Component: full_rate_adsl_router

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login tex...

📅 2004-12-31
CVSS 7.5 Dossier →
CVE-2004-1790 UNKNOWN
Component: full_rate_adsl_router

Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary we...

📅 2004-12-31
CVSS 4.3 Dossier →
Page 3 of 3 (66 Total Records)