Edimax records
66 published records for vendor edimax.
Researcher profile
- Entered KEV
- 1 · 1.5%
- Weaponized
- 1 · 1.5%
- Pre-auth RCE
- 19
- With a fix record
- 0%
- Median publish → KEV
- 15 days
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')15
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
The weakness classes this vendor ships most often: where to look.
CWEAll records
66 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
89Now | CVE-2025-1316Weaponized | Edimax IC-7100 IP Camera OS Command Injectionedimax · ic-7100 firmware · CWE-78 | Critical9.3 | KEV | 74.4% | Mar 4, 2025 |
47Plan | CVE-2025-70161No exploit | EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection.edimax · br-6208ac firmware · CWE-77 | Critical9.8 | — | 27.0% | Jan 9, 2026 |
46Plan | CVE-2023-31983No exploit | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp edimax · br-6428ns firmware · CWE-77 | Critical9.8 | — | 24.9% | May 12, 2023 |
44Plan | CVE-2022-45768No exploit | Command Injection vulnerability in Edimax Technology Co., Ltd.edimax · br-6428ns firmware · CWE-78 | High8.8 | — | 28.6% | Feb 7, 2023 |
42Plan | CVE-2025-28146No exploit | Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url iedimax · br-6478ac v3 firmware · CWE-94 | Critical9.8 | — | 11.4% | Apr 4, 2025 |
42Plan | CVE-2011-4502No exploit | The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with fiedimax · br-6104k router firmware · CWE-78 | Critical10.0 | — | 5.4% | Nov 22, 2011 |
41Plan | CVE-2023-31986No exploit | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setedimax · br-6428ns firmware · CWE-77 | Critical9.8 | — | 8.1% | May 15, 2023 |
41Plan | CVE-2023-31985No exploit | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the foredimax · br-6428ns firmware · CWE-77 | Critical9.8 | — | 8.0% | May 12, 2023 |
41Plan | CVE-2011-4501No exploit | The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with fiedimax · br-6104k router firmware · CWE-16 | Critical10.0 | — | 4.2% | Nov 22, 2011 |
40Plan | CVE-2025-22905No exploit | RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.edimax · re11s firmware · CWE-94 | Critical9.8 | — | 4.7% | Jan 15, 2025 |
40Plan | CVE-2020-26762No exploit | A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorizeedimax · ic-3116w firmware · CWE-787 | Critical9.8 | — | 2.3% | Dec 1, 2020 |
40Plan | CVE-2025-22906No exploit | RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.edimax · re11s firmware · CWE-94 | Critical9.8 | — | 2.3% | Jan 15, 2025 |
40Plan | CVE-2021-40597No exploit | The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.edimax · ic-3140w firmware · CWE-798 | Critical9.8 | — | 2.0% | Jun 29, 2022 |
40Plan | CVE-2025-22912Proof of concept | RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.edimax · re11s firmware · CWE-77 | Critical9.8 | — | 1.9% | Jan 15, 2025 |
39Monitor | CVE-2020-37125No exploit | Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Executionedimax · ew-7438rpn mini firmware · CWE-78 | Critical9.3 | — | 6.9% | Feb 5, 2026 |
39Monitor | CVE-2025-45857No exploit | EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.edimax · cv-7428ns firmware · CWE-94 | Critical9.8 | — | 1.0% | May 13, 2025 |
39Monitor | CVE-2025-22913No exploit | RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.edimax · re11s firmware · CWE-120 | Critical9.8 | — | 0.8% | Jan 15, 2025 |
39Monitor | CVE-2025-22916No exploit | RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.edimax · re11s firmware · CWE-120 | Critical9.8 | — | 0.6% | Jan 15, 2025 |
39Monitor | CVE-2025-22904No exploit | RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.edimax · re11s firmware · CWE-120 | Critical9.8 | — | 0.6% | Jan 15, 2025 |
39Monitor | CVE-2025-22907No exploit | RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.edimax · re11s firmware · CWE-120 | Critical9.8 | — | 0.6% | Jan 15, 2025 |
39Monitor | CVE-2023-49351No exploit | A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite oedimax · br-6478ac firmware · CWE-787 | Critical9.8 | — | 0.5% | Jan 16, 2024 |
38Monitor | CVE-2025-34024No exploit | Edimax EW-7438RPn Mini OS Command Injection via mp.aspedimax · ew-7438rpn mini firmware · CWE-78 | Critical9.4 | — | 3.9% | Jun 20, 2025 |
38Monitor | CVE-2025-34029No exploit | Edimax EW-7438RPn Mini OS Command Injection via syscmd.aspedimax · ew-7438rpn mini firmware · CWE-78 | Critical9.4 | — | 3.5% | Jun 20, 2025 |
37Monitor | CVE-2024-48419No exploit | Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead.edimax · br-6476ac firmware · CWE-77 | High8.8 | — | 5.3% | Jan 27, 2025 |
36Monitor | CVE-2018-8072No exploit | An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices.edimax · ic-3140w firmware · CWE-787 | High8.8 | — | 2.7% | Apr 26, 2018 |
- CVE-2025-131689Now
Edimax IC-7100 IP Camera OS Command Injection
CriticalCVSS 9.3KEVWeaponizedEPSS 74%edimax · ic-7100 firmwareMar 4, 2025
- CVE-2025-7016147Plan
EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection.
CriticalCVSS 9.8No exploitEPSS 27%edimax · br-6208ac firmwareJan 9, 2026
- CVE-2023-3198346Plan
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp
CriticalCVSS 9.8No exploitEPSS 24%edimax · br-6428ns firmwareMay 12, 2023
- CVE-2022-4576844Plan
Command Injection vulnerability in Edimax Technology Co., Ltd.
HighCVSS 8.8No exploitEPSS 28%edimax · br-6428ns firmwareFeb 7, 2023
- CVE-2025-2814642Plan
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url i
CriticalCVSS 9.8No exploitEPSS 11%edimax · br-6478ac v3 firmwareApr 4, 2025
- CVE-2011-450242Plan
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with fi
CriticalCVSS 10.0No exploitEPSS 5%edimax · br-6104k router firmwareNov 22, 2011
- CVE-2023-3198641Plan
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the set
CriticalCVSS 9.8No exploitEPSS 8%edimax · br-6428ns firmwareMay 15, 2023
- CVE-2023-3198541Plan
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the for
CriticalCVSS 9.8No exploitEPSS 8%edimax · br-6428ns firmwareMay 12, 2023
- CVE-2011-450141Plan
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with fi
CriticalCVSS 10.0No exploitEPSS 4%edimax · br-6104k router firmwareNov 22, 2011
- CVE-2025-2290540Plan
RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
CriticalCVSS 9.8No exploitEPSS 4%edimax · re11s firmwareJan 15, 2025
- CVE-2020-2676240Plan
A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorize
CriticalCVSS 9.8No exploitEPSS 2%edimax · ic-3116w firmwareDec 1, 2020
- CVE-2025-2290640Plan
RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
CriticalCVSS 9.8No exploitEPSS 2%edimax · re11s firmwareJan 15, 2025
- CVE-2021-4059740Plan
The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.
CriticalCVSS 9.8No exploitEPSS 2%edimax · ic-3140w firmwareJun 29, 2022
- CVE-2025-2291240Plan
RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
CriticalCVSS 9.8Proof of conceptEPSS 1%edimax · re11s firmwareJan 15, 2025
- CVE-2020-3712539Monitor
Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution
CriticalCVSS 9.3No exploitEPSS 6%edimax · ew-7438rpn mini firmwareFeb 5, 2026
- CVE-2025-4585739Monitor
EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
CriticalCVSS 9.8No exploitEPSS 1%edimax · cv-7428ns firmwareMay 13, 2025
- CVE-2025-2291339Monitor
RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
CriticalCVSS 9.8No exploitEPSS 0%edimax · re11s firmwareJan 15, 2025
- CVE-2025-2291639Monitor
RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
CriticalCVSS 9.8No exploitEPSS 0%edimax · re11s firmwareJan 15, 2025
- CVE-2025-2290439Monitor
RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
CriticalCVSS 9.8No exploitEPSS 0%edimax · re11s firmwareJan 15, 2025
- CVE-2025-2290739Monitor
RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
CriticalCVSS 9.8No exploitEPSS 0%edimax · re11s firmwareJan 15, 2025
- CVE-2023-4935139Monitor
A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite o
CriticalCVSS 9.8No exploitEPSS 0%edimax · br-6478ac firmwareJan 16, 2024
- CVE-2025-3402438Monitor
Edimax EW-7438RPn Mini OS Command Injection via mp.asp
CriticalCVSS 9.4No exploitEPSS 3%edimax · ew-7438rpn mini firmwareJun 20, 2025
- CVE-2025-3402938Monitor
Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp
CriticalCVSS 9.4No exploitEPSS 3%edimax · ew-7438rpn mini firmwareJun 20, 2025
- CVE-2024-4841937Monitor
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead.
HighCVSS 8.8No exploitEPSS 5%edimax · br-6476ac firmwareJan 27, 2025
- CVE-2018-807236Monitor
An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices.
HighCVSS 8.8No exploitEPSS 2%edimax · ic-3140w firmwareApr 26, 2018