CVE-2024-48418: CSRF
In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48418?
CVE-2024-48418 is considered a high severity vulnerability due to its ability to allow arbitrary command execution on the affected router.
How do I fix CVE-2024-48418?
To fix CVE-2024-48418, update the Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC to the latest firmware version provided by Edimax.
What are the consequences of CVE-2024-48418?
The consequences of CVE-2024-48418 include potential unauthorized access and control over the router, allowing attackers to execute arbitrary commands.
Who is affected by CVE-2024-48418?
CVE-2024-48418 affects users of the Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC running version 1.06.
Is there a workaround for CVE-2024-48418?
A workaround for CVE-2024-48418 includes restricting access to the web interface to trusted network users until a firmware update can be applied.