VULNERABILITY INTELLIGENCE

CVE-2024-48418

CVSS score8.8 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-01-27
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-352

Primary references