CVE-2024-48416
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to a buffer overflow via the /goform/fromSetLanDhcpsClientbinding endpoint.
Risk Assessment
An attacker can remotely crash the device or potentially execute arbitrary code, leading to full compromise of the router and network security.
Recommendation
Immediately update the router firmware to the latest version or apply temporary mitigations such as restricting access to the administrative interface.
Other vulnerabilities in Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC
See all- CVE-2024-48420High
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to a buffer overflow in the /goform/getWifiBasic function. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.
- CVE-2024-48417Medium
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to Cross-Site Scripting (XSS) in the management interface via /bin/goahead. The vulnerability exists in endpoints /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.
Original NVD description (English source)
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanDhcpsClientbinding.