CVE-2024-48417

MediumCVSS 5.2

Published: 27/01/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to Cross-Site Scripting (XSS) in the management interface via /bin/goahead. The vulnerability exists in endpoints /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.

Risk Assessment

An attacker can inject malicious JavaScript into the admin interface, potentially leading to session theft, admin account takeover, or unauthorized actions within the local network.

Recommendation

Immediately update the router firmware to the latest version available from the vendor. If no update is available, restrict admin panel access to trusted IP addresses and disable remote management.

Original NVD description (English source)

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting (XSS) in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.