CVE-2024-48420
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to a buffer overflow in the /goform/getWifiBasic function. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.
Risk Assessment
The risk includes potential unauthorized control of the router, leading to compromise of the local network and interception of network traffic.
Recommendation
Immediately update the router firmware to the latest version provided by the manufacturer. If no update is available, restrict management interface access to trusted networks only.
Other vulnerabilities in Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC
See all- CVE-2024-48417Medium
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to Cross-Site Scripting (XSS) in the management interface via /bin/goahead. The vulnerability exists in endpoints /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.
- CVE-2024-48416High
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to a buffer overflow via the /goform/fromSetLanDhcpsClientbinding endpoint.
Original NVD description (English source)
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic.