Edimax

Br-6208ac Firmware

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-7685

Exploit
  • EPSS 0.05%
  • Veröffentlicht 03.05.2026 07:00:12
  • Zuletzt bearbeitet 05.05.2026 19:30:15

A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway  results in buffer overflow. The attack may be initiated remotely. The ex...

6.3

CVE-2026-7682

Exploit
  • EPSS 1.41%
  • Veröffentlicht 03.05.2026 06:15:09
  • Zuletzt bearbeitet 05.05.2026 19:30:15

A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of the argument L2TPUserName results in command injection. It is possibl...

7.5

CVE-2026-1972

Exploit
  • EPSS 0.02%
  • Veröffentlicht 06.02.2026 01:02:06
  • Zuletzt bearbeitet 20.02.2026 15:20:01

A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. ...

9.8

CVE-2025-70161

Exploit
  • EPSS 0.64%
  • Veröffentlicht 09.01.2026 00:00:00
  • Zuletzt bearbeitet 22.01.2026 20:45:13

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious co...

6.1

CVE-2025-15258

Exploit
  • EPSS 0.05%
  • Veröffentlicht 30.12.2025 17:32:05
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes o...

9.8

CVE-2025-15257

Exploit
  • EPSS 0.44%
  • Veröffentlicht 30.12.2025 17:15:42
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMa...

9.8

CVE-2025-15256

Exploit
  • EPSS 0.6%
  • Veröffentlicht 30.12.2025 16:32:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command...

6.5

CVE-2025-14910

Exploit
  • EPSS 0.06%
  • Veröffentlicht 19.12.2025 02:16:04
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be us...