CVEvulnerability

CVE-2024-48418

8.8 HIGH Published 2025-01-27 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2025-01-27
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-352

Description

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.

Affected configurations

• edimax br-6476ac firmware 1.06

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References