[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-20 18:49 UTC
Importiert: 2026-10-20 20:24 UTC
Quelle-ID: full_disc
uid_hash: 51172a3e0161a01991c6656f0341ed794000e941338a6512cbac8c1cd070b576

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the

Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO

wireless router from Edimax Technology Co., Ltd. (Taiwan). A single

authenticated POST to a manufacturing radio-calibration route that is still

registered in production firmware reaches system() with thirty raw request

fields interpolated into one command line, and the web server process that...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss