EUVD-2026-29203
GHSA-c9c6-xfr6-q42w
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker is able to execute arbitrary system commands on the device.
AnalysisAI
Command injection in EDIMAX BR-6428nS V3 wireless router firmware 1.15 allows authenticated attackers to execute arbitrary system commands via crafted input to WLAN configuration interface. The vulnerability requires low-privilege network authentication but no user interaction, enabling complete device compromise including credential theft, traffic interception, and pivot attacks into connected networks. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Audit network topology to identify all BR-6428nS V3 routers running firmware 1.15 and document their connectivity and access controls. Within 7 days: Implement network segmentation and firewall rules to restrict management interface access (HTTP/HTTPS admin ports) to authorized administrator IP ranges only; disable remote management if enabled. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today