CVE-2024-48418

8.8 highEPSS 0.3%

High (8.8) in edimax br-6476ac firmware. EPSS 0.3% chance of exploitation in the next 30 days.

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2025-01-27
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

edimax:br-6476ac_firmware

References

https://github.com/SpikeReply/advisories/blob/c271ddb997bc0263274118acc380bc71ce9c316b/cve/edimax/cve-2024-48418.md

Check your stack JSON