Edimax EW-7438RPN Mini
Approved changes feed: RSS · Atom
cpe:2.3:h:edimax:ew-7438rpn_mini:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Edimax (b21209bc-38b2-5a9c-baa2-25a5068c39e9) |
|---|---|
| Product | Ew 7438Rpn Mini (61567694-95aa-5e33-b913-200a152c15ec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34029 |
not_vulnerable | 2026-06-03 15:00:43.335733 |
Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp
An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell commands directly, resulting in command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.
Published: 2025-06-20T18:38:15.689Z
Updated: 2026-05-14T02:07:23.605Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34024 |
not_vulnerable | 2026-06-03 15:00:43.322117 |
Edimax EW-7438RPn Mini OS Command Injection via mp.asp
An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.
Published: 2025-06-20T18:38:02.885Z
Updated: 2026-05-14T02:07:22.672Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37097 |
not_vulnerable | 2026-06-03 14:42:40.746037 |
Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)
HIGH (7.5)
Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.
Published: 2026-02-03T22:01:54.059Z
Updated: 2026-03-05T01:27:55.526Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37096 |
not_vulnerable | 2026-06-03 14:42:40.745547 |
Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
MEDIUM (5.3)
Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.
Published: 2026-02-03T22:01:53.564Z
Updated: 2026-03-05T01:27:54.754Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10863 |
not_vulnerable | 2026-06-03 14:35:29.857657 |
Details available
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.
Published: 2019-08-08T20:02:53.000Z
Updated: 2024-08-06T03:38:56.569Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.