HIGH🇵🇱 Wersja polska

CVE-2016-10863

CVSS 8.8v3.0pub. 2019-08-08upd. 2024-11-21

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Edimax 7237rpd

    HW
    Edimax
    all versions

  • Edimax 7237rpd Firmware

    OS
    Edimax
    all versions

  • Edimax Ew 7438rpn Mini

    HW
    Edimax
    all versions

  • Edimax Ew 7438rpn Mini Firmware

    OS
    Edimax
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-37125CRITICAL9.3PL ✓same product

RCE bez uwierzytelnienia w Edimax EW-7438RPn Mini przez endpoint /goform/mp

CVE-2025-34024CRITICAL9.4PL ✓same product

OS Command Injection w Edimax EW-7438RPn Mini — wykonanie poleceń jako root

CVE-2025-34029CRITICAL9.4PL ✓same product

Command injection w Edimax EW-7438RPn Mini — wykonanie poleceń jako root

CVE-2020-37150HIGH8.7same product

Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unset...

CVE-2020-37097HIGH8.7same product

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuratio...