124
CVEs
16
Critical
56
High
1
KEV
118
PoC
71
Unpatched C/H
0.8%
Patch Rate
2.0%
Avg EPSS
Severity Breakdown
CRITICAL
16
HIGH
56
MEDIUM
13
LOW
39
Monthly CVE Trend
Affected Products (28)
Ew 7438Rpn
24
Br 6675Nd
12
Br 6478Ac
10
Re11S Firmware
8
Br 6478ac V3 Firmware
8
Ew 7478Apc
7
Ew 7438rpn Mini Firmware
7
Br 6428Ns
7
Br 6208ac Firmware
6
Br 6476Ac Firmware
5
Br 6478Ac V2
5
Br 6208Ac V1 Firmware
3
Br 6288Acl Firmware
3
Br 6428Ns Firmware
3
Ic 3140W Firmware
3
Br 6214K
2
Ic 5150W Firmware
2
Br 6208Ac
2
Br 6428Nc
2
Open Redirect
2
Ic 6220Dc Firmware
2
Br 6473Ax Firmware
1
Ic 7100 Firmware
1
Cv 7428Ns Firmware
1
Edimax Ew 7438Rpn V2 Firmware
1
Br 6228Nc
1
Ic 3116W Firmware
1
Br 6258N Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-1316 | Edimax IC-7100 IP camera allows unauthenticated remote code execution through improper neutralization of requests, with no patch available as the device is end-of-life. | CRITICAL | 9.3 | 85.1% | 182 |
KEV
No patch
|
| CVE-2025-28146 | Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.4%. | CRITICAL | 9.8 | 19.4% | 88 |
PoC
No patch
|
| CVE-2025-45857 | EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 4.4% | 73 |
PoC
No patch
|
| CVE-2025-22906 | RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 2.2% | 71 |
PoC
No patch
|
| CVE-2025-22912 | RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 2.2% | 71 |
PoC
No patch
|
| CVE-2025-22905 | RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 1.3% | 70 |
PoC
No patch
|
| CVE-2020-37125 | Unauthenticated remote code execution via OS command injection in Edimax EW-7438RPn-v3 Mini wireless extender firmware 1.27. EPSS 1.3% with PoC available. | CRITICAL | 9.8 | 1.3% | 70 |
PoC
No patch
|
| CVE-2025-70161 | EDIMAX BR-6208AC V2 router allows command injection through the pppUserName field via system() without sanitization. PoC available. | CRITICAL | 9.8 | 0.5% | 70 |
PoC
No patch
|
| CVE-2025-22904 | RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.4% | 69 |
PoC
No patch
|
| CVE-2025-22916 | RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.4% | 69 |
PoC
No patch
|
| CVE-2025-22907 | RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.4% | 69 |
PoC
No patch
|
| CVE-2023-31985 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 8.1% | 69 |
PoC
No patch
|
| CVE-2023-31983 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 24.9% | 69 |
PoC
No patch
|
| CVE-2023-31986 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 8.2% | 69 |
PoC
No patch
|
| CVE-2024-48419 | Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 3.5% | 67 |
PoC
No patch
|