Edimax EW-7438RPn vulnerabilities

Stack-based buffer overflow vulnerability in the formSDHCP function in /goform/formSDHCP on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

Stack-based buffer overflow vulnerability in the formStats function in /goform/formStats on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

A vulnerability was detected in Edimax EW-7438RPn 1.31. The function formrefresh in the file /goform/formrefresh is vulnerable to stack-based buffer overflow via the submit-url argument. The attack can be launched remotely, and the exploit is public. The vendor did not respond.

Stack-based buffer overflow vulnerability in the formLogout function in /goform/formLogout on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

Stack-based buffer overflow vulnerability in the formLicence function in /goform/formLicence on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

Stack-based buffer overflow vulnerability in the formWpsProxyEnable function in /goform/formWpsProxyEnable on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formRadius function of the /goform/formRadius file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formAccept function of the /goform/formAccept file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formConnectionSetting function of the /goform/formConnectionSetting file via manipulation of the max_Conn/timeOut arguments. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the webs component. Manipulation of the selSSID/submit-url arguments causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formHwSet function of the /goform/formHwSet file. Manipulation of multiple arguments such as Anntena, Mcs, regDomain, nic0Addr, and others causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formWlanMP function of the /goform/formWlanMP file. Manipulation of multiple arguments such as ateFunc, ateGain, ateTxCount, and others causes the overflow. The attack can be performed remotely and the exploit is publicly available.

A vulnerability has been found in Edimax EW-7438RPn version 1.31, allowing OS command injection in the formWlanMP function of the /goform/formWlanMP file. The attack can be launched remotely by manipulating multiple arguments.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formEZCHNwlanSetup function of the /goform/formEZCHNwlanSetu file. The attack can be launched remotely by manipulating the method argument.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formConnectionSetting function of the /goform/formConnectionSetting file. The attack can be launched remotely by manipulating the max_Conn and timeOut arguments.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formAccept function of the /goform/formAccep file. The attack can be launched remotely by manipulating the submit-url argument.

A buffer overflow vulnerability was discovered in Edimax EW-7438RPn version 1.28a in the formwlencrypt24g function of /goform/formwlencrypt24g. The attack can be launched remotely and the exploit is public.

A command injection vulnerability was identified in Edimax EW-7438RPn version 1.28a in the formHwSet function of the /goform/formHwSet file. An attacker can remotely manipulate arguments such as Anntena, Mcs, regDomain, and others, leading to arbitrary command execution. The exploit is publicly available and may be used.

A stack-based buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the /goform/mp file. The attack can be launched remotely and the exploit is public.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWizSurvey function in /goform/formWizSurvey. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

A buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the formWirelessTbl function of /goform/formWirelessTbl. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the formWizSurvey function of /goform/formWizSurvey. Manipulation of the ssid/manualssid/ip/mask/gateway arguments leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.

A stack-based buffer overflow vulnerability was detected in Edimax EW-7438RPn up to version 1.31 in the formWpsStart function of /goform/formWpsStart. The attack can be launched remotely and the exploit is public.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWpsStart function in /goform/formWpsStart. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.