Approved changes feed: RSS · Atom

cpe:2.3:a:edimax:ew-7478apc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEdimax (b21209bc-38b2-5a9c-baa2-25a5068c39e9)
ProductEw 7478Apc (ed38c717-e787-597e-a900-be71116c4d72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13583 vulnerable 2026-07-29 00:23:33.205061 Edimax EW-7478APC POST Request formUSBFolder buffer overflow
HIGH (8.8)
A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manipulation of the argument ShareName/SelectName leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T15:45:07.689Z
Updated: 2026-07-01T14:04:42.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13582 vulnerable 2026-07-29 00:23:33.204851 Edimax EW-7478APC POST Request formUSBAccount buffer overflow
HIGH (8.8)
A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T15:30:09.081Z
Updated: 2026-06-29T16:29:00.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13581 vulnerable 2026-07-29 00:23:33.204734 Edimax EW-7478APC POST Request formStaDrvSetup os command injection
MEDIUM (6.3)
A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. The manipulation of the argument rootAPmac results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T15:15:07.330Z
Updated: 2026-06-30T15:09:50.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13580 vulnerable 2026-07-29 00:23:33.204611 Edimax EW-7478APC POST Request formQoS buffer overflow
HIGH (8.8)
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T15:00:18.232Z
Updated: 2026-06-29T16:19:48.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13564 vulnerable 2026-07-29 00:23:33.185436 Edimax EW-7478APC POST Request formPPPoESetup stack-based overflow
HIGH (8.8)
A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T11:45:07.585Z
Updated: 2026-06-29T13:29:21.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13563 vulnerable 2026-07-29 00:23:33.185216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13562 vulnerable 2026-07-29 00:23:33.184998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13561 vulnerable 2026-07-29 00:23:33.184860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13560 vulnerable 2026-07-29 00:23:33.184658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.