Edimax BR-6208AC router command injection flaw
Edimax routers can be hacked remotely, and attack code is public!
Summary
The Edimax BR-6208AC router's /goform/mp function has a command injection flaw that lets a remote attacker run commands. Attack code is public, and the vendor did not respond to the disclosure.
What to do
No fixed version is named and the vendor did not respond. Check whether firmware newer than 1.32 exists, and keep the admin page off the internet.
Update these devices now!
- Edimax BR-6208AC
Products and platforms
CVE IDs
Sources
Times
First published
First seen