Approved changes feed: RSS · Atom

cpe:2.3:o:edimax:br-6208ac_firmware:1.02:*:*:*:*:*:*:*

part: o version: 1.02 update: *

VendorEdimax (b21209bc-38b2-5a9c-baa2-25a5068c39e9)
ProductBr 6208Ac Firmware (60d870fb-654a-55a9-8f04-940ddc802786)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15258 vulnerable 2026-06-03 14:58:56.723474 Edimax BR-6208AC Web-based Configuration formALGSetup redirect
LOW (3.5)
A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Edimax confirms this issue: "The product mentioned, EDIMAX BR-6208AC V2, has reached its End of Life (EOL) status. It is no longer supported or maintained by Edimax, and it is no longer available for purchase in the market. Consequently, there will be no further firmware updates or patches for this device. We recommend users upgrade to newer models for better security." This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-30T17:32:05.860Z
Updated: 2026-02-24T06:18:29.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15257 vulnerable 2026-06-03 14:58:56.722806 Edimax BR-6208AC Web-based Configuration formRoute command injection
HIGH (7.3)
A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Edimax confirms this issue: "The product mentioned, EDIMAX BR-6208AC V2, has reached its End of Life (EOL) status. It is no longer supported or maintained by Edimax, and it is no longer available for purchase in the market. Consequently, there will be no further firmware updates or patches for this device. We recommend users upgrade to newer models for better security." This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-30T17:02:06.973Z
Updated: 2026-02-24T06:18:16.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15256 vulnerable 2026-06-03 14:58:56.720780 Edimax BR-6208AC Web-based Configuration formStaDrvSetup command injection
HIGH (7.3)
A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Edimax confirms this issue: "The product mentioned, EDIMAX BR-6208AC V2, has reached its End of Life (EOL) status. It is no longer supported or maintained by Edimax, and it is no longer available for purchase in the market. Consequently, there will be no further firmware updates or patches for this device. We recommend users upgrade to newer models for better security." This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-30T16:32:06.090Z
Updated: 2026-02-24T06:18:04.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14910 vulnerable 2026-06-03 14:58:56.142341 Edimax BR-6208AC FTP Daemon Service handle_retr path traversal
MEDIUM (4.3)
A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is no longer available in the market and has been discontinued for five years. Consequently, Edimax no longer provides technical support, firmware updates, or security patches for this specific model. However, to ensure the safety of our remaining active users, we acknowledge this report and will take the following mitigation actions: (A) We will issue an official security advisory on our support website. (B) We will strongly advise users to disable the FTP service on this device to mitigate the reported risk, by which the product will still work for common use. (C) We will recommend users upgrade to newer, supported models." This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-19T01:32:06.853Z
Updated: 2026-02-24T05:55:44.183Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.