Edimax

Br-6208ac Firmware

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-1972

Exploit
  • EPSS 0.02%
  • Veröffentlicht 06.02.2026 01:02:06
  • Zuletzt bearbeitet 20.02.2026 15:20:01

A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. ...

9.8

CVE-2025-70161

Exploit
  • EPSS 0.56%
  • Veröffentlicht 09.01.2026 00:00:00
  • Zuletzt bearbeitet 22.01.2026 20:45:13

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious co...

6.1

CVE-2025-15258

Exploit
  • EPSS 0.04%
  • Veröffentlicht 30.12.2025 17:32:05
  • Zuletzt bearbeitet 24.02.2026 07:17:07

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes o...

9.8

CVE-2025-15257

Exploit
  • EPSS 0.39%
  • Veröffentlicht 30.12.2025 17:15:42
  • Zuletzt bearbeitet 24.02.2026 07:17:07

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMa...

9.8

CVE-2025-15256

Exploit
  • EPSS 0.53%
  • Veröffentlicht 30.12.2025 16:32:06
  • Zuletzt bearbeitet 13.01.2026 21:35:45

A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command...

6.5

CVE-2025-14910

Exploit
  • EPSS 0.11%
  • Veröffentlicht 19.12.2025 02:16:04
  • Zuletzt bearbeitet 12.01.2026 17:01:11

A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be us...