Edimax Ew-7438rpn Mini Firmware
8 CVEs affecting Edimax Ew-7438rpn Mini Firmware. Latest disclosed: 2026-02-05. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-37125 | Critical | 9.8 | 2026-02-05 | Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /… |
CVE-2025-34029 | High | 8.8 | 2025-06-20 | An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSys… |
CVE-2025-34024 | High | 8.8 | 2025-06-20 | An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint impr… |
CVE-2016-10863 | High | 8.8 | 2019-08-08 | Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure. |
CVE-2020-37149 | High | 8.1 | 2026-02-05 | Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An attacker can trick an authenticated us… |
CVE-2020-37150 | High | 7.5 | 2026-02-05 | Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and secur… |
CVE-2020-37097 | High | 7.5 | 2026-02-03 | Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Att… |
CVE-2020-37096 | Medium | 5.3 | 2026-02-03 | Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web page… |