EUVD-2026-33486
GHSA-xrc6-7rx8-67xr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
Command injection in Edimax BR-6478AC firmware 1.23 allows a remotely authenticated attacker to execute arbitrary OS commands by manipulating the rootAPmac parameter in a POST request to the /goform/formWlbasic endpoint. The vulnerable function formWlbasic passes unsanitized input directly to a system-level command, a pattern common in consumer embedded router firmware. A public proof-of-concept exploit has been disclosed, lowering the technical bar for exploitation; no vendor-released patch has been identified at time of analysis.
Technical ContextAI
The affected product is the Edimax BR-6478AC wireless router firmware version 1.23, identified by CPE cpe:2.3:a:edimax:br-6478ac. The vulnerability resides in the formWlbasic CGI handler at /goform/formWlbasic, which processes POST requests related to wireless basic settings - likely including WDS or repeater configuration where rootAPmac specifies the root access point MAC address. The root cause is CWE-77 (Improper Neutralization of Special Elements used in a Command), meaning the rootAPmac argument is passed without adequate sanitization or escaping to an underlying shell command, likely via a system() or popen() call in the router's embedded web server. This is a structural weakness endemic to embedded device firmware that constructs shell commands from user-supplied HTTP parameters without input validation.
RemediationAI
No vendor-released patch has been identified at time of analysis for Edimax BR-6478AC. Administrators should monitor https://vuldb.com/vuln/367418 and Edimax's firmware download page for updates. As an immediate compensating control, disable remote (WAN-side) web management access if not operationally required - this removes the network attack vector for external adversaries, though it does not protect against authenticated LAN-side attackers. Placing the management interface behind firewall rules blocking untrusted sources to ports 80 and 443 further reduces exposure. If WDS or repeater functionality using the rootAPmac parameter is not needed, disabling that wireless feature may eliminate the vulnerable code path entirely, at the cost of losing wireless bridging capability. Enforcing strong, unique administrative credentials reduces the risk posed by the PR:L (low-privilege) authentication requirement. Default or weak credentials on consumer routers effectively lower the exploitation barrier in practice.
Stack-based buffer overflow in the Edimax BR-6478AC 1.23 wireless router enables authenticated remote attackers to corru
Remote buffer overflow in the Edimax BR-6478AC 1.23 wireless router allows authenticated attackers to corrupt memory via
Buffer overflow in the Edimax BR-6478AC v1.23 wireless router allows authenticated remote attackers to corrupt memory by
Buffer overflow in the Edimax BR-6478AC 1.23 router's web management interface allows remote attackers with low-level cr
Remote buffer overflow in the Edimax BR-6478AC router (firmware 1.23) allows authenticated attackers to corrupt memory b
Stack/buffer overflow in the Edimax BR-6478AC 1.23 wireless router's web management interface allows authenticated remot
Authenticated command injection in Edimax BR-6478AC 1.23 firmware allows network-adjacent attackers with low-privilege c
Command injection in Edimax BR-6478AC 1.23 exposes the router's web management interface to remote exploitation via a cr
Command injection in the Edimax BR-6478AC 1.23 wireless router's formAccept POST handler allows an authenticated remote
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today