CVE-2025-14092: Edimax BR-6478AC V3 formDebugDiagnosticRun sub_416898 os command injection
A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14092?
CVE-2025-14092 is rated as critical due to its potential for remote code execution via OS command injection.
How do I fix CVE-2025-14092?
To fix CVE-2025-14092, update the firmware of Edimax BR-6478AC V3 to the latest version provided by the vendor.
What type of vulnerability is CVE-2025-14092?
CVE-2025-14092 is categorized as an OS command injection vulnerability.
Can CVE-2025-14092 be exploited remotely?
Yes, CVE-2025-14092 can be exploited remotely, making it particularly dangerous.
What is affected by CVE-2025-14092?
CVE-2025-14092 affects the Edimax BR-6478AC V3 router running firmware version 1.0.15.