CVE-2024-48418

Exploit

EPSS 0.05%
Veröffentlicht 27.01.2025 17:15:15
Zuletzt bearbeitet 28.05.2025 17:53:57
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Edimax ≫ Br-6476ac Firmware Version1.06

Edimax ≫ Br-6476ac Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.168

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://edimax.com

Product

https://github.com/SpikeReply/advisories/blob/c271ddb997bc0263274118acc380bc71ce9c316b/cve/edimax/cve-2024-48418.md

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2024-48418

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-48418

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-48418

EUVD