CVE-2025-34024 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint impro…
Critical CVSS: 9.4

CVE-2025-34024

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.
Vendor
Edimax
Product
Ew-7438rpn Mini Firmware
CWE
CWE-78
Yayın Tarihi
2025-06-20 19:15:37
Güncelleme
2025-11-20 22:15:55
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-78 Ew-7438rpn Mini Firmware CRITICAL Edimax 2025

Referanslar

https://vulncheck.com/advisories/edimax-ew-7438rpn-command-injections https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=32163 https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/ https://www.exploit-db.com/exploits/48377