CVE-2024-48419
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 suffers from command injection vulnerabilities in /bin/goahead. These issues are exploitable via /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd, allowing an attacker with web interface access to execute arbitrary shell commands with root privileges.
Risk Assessment
An attacker can gain full control over the router, potentially altering network configuration, intercepting traffic, or using the device for further attacks within the internal network.
Recommendation
Immediately update the router firmware to the latest version, or if unavailable, restrict administrative interface access to trusted IP addresses and disable unused diagnostic functions.
Original NVD description (English source)
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an attacker with access to the web interface to inject and execute arbitrary shell commands, with "root" privileges.