GCVE - cpe:2.3:h:edimax:br-6478ac_v3:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:edimax:br-6478ac_v3:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Edimax (`b21209bc-38b2-5a9c-baa2-25a5068c39e9`)
Product	Br 6478Ac V3 (`250d4844-db14-546a-b67b-cea446f2ad37`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-28146`	not_vulnerable	2026-06-03 15:00:13.660618	Details available Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel Published: 2025-04-04T00:00:00.000Z Updated: 2025-04-15T15:15:25.759Z Open on db.gcve.eu Reference links https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/3 https://gist.github.com/regainer27/469a6f2b694a76c3b58249b27fdd0881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28145`	not_vulnerable	2026-06-03 15:00:13.660173	Details available Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat. Published: 2025-04-15T00:00:00.000Z Updated: 2025-04-15T20:12:35.321Z Open on db.gcve.eu Reference links https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/2 https://gist.github.com/regainer27/cee49ede0f576447cc4b1bb078e7a981	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28144`	not_vulnerable	2026-06-03 15:00:13.659800	Details available Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function. Published: 2025-04-15T00:00:00.000Z Updated: 2025-04-15T20:09:39.960Z Open on db.gcve.eu Reference links https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/edimax_br-6847_v3-%20peerpin_stack_overflow https://gist.github.com/regainer27/31a4df78e523635085908ddd4b68d91f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28143`	not_vulnerable	2026-06-03 15:00:13.659296	Details available Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup. Published: 2025-04-15T00:00:00.000Z Updated: 2025-04-15T20:10:37.243Z Open on db.gcve.eu Reference links https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/5 https://gist.github.com/regainer27/885505cda80f81069ba39b11f2f996fc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28142`	not_vulnerable	2026-06-03 15:00:13.658888	Details available Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare. Published: 2025-04-15T00:00:00.000Z Updated: 2025-04-15T20:11:36.233Z Open on db.gcve.eu Reference links https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/4 https://gist.github.com/regainer27/fb033d40b9d0245c36e520eeb34b7e76	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14094`	not_vulnerable	2026-06-03 14:58:54.515819	Edimax BR-6478AC V3 formSysCmd sub_44CCE4 os command injection MEDIUM (4.7) A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-05T17:02:05.688Z Updated: 2026-02-24T05:41:29.859Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334484 https://vuldb.com/?ctiid.334484 https://vuldb.com/?submit.696668 https://github.com/Kriswu1337/CVE/blob/main/EDIMAX/1/3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14093`	not_vulnerable	2026-06-03 14:58:54.515448	Edimax BR-6478AC V3 formTracerouteDiagnosticRun sub_416990 os command injection MEDIUM (4.7) A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-05T16:32:05.836Z Updated: 2026-02-24T05:41:17.143Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334483 https://vuldb.com/?ctiid.334483 https://vuldb.com/?submit.696633 https://github.com/Kriswu1337/CVE/blob/main/EDIMAX/1/2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14092`	not_vulnerable	2026-06-03 14:58:54.514758	Edimax BR-6478AC V3 formDebugDiagnosticRun sub_416898 os command injection MEDIUM (4.7) A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-05T16:02:08.289Z Updated: 2026-02-24T05:41:05.548Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334482 https://vuldb.com/?ctiid.334482 https://vuldb.com/?submit.696632 https://github.com/Kriswu1337/CVE/blob/main/EDIMAX/1/1.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.