CVE-2026-108915: Edimax BR-6208AC formWlanMP buffer overflow
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Edimax BR-6208AC devices running version 1.32 are affected. The issue applies only to products that are no longer supported by the maintainer.
What does an attacker need to exploit it?
An attacker can exploit the flaw remotely by manipulating the ateBW argument handled by /goform/formWlanMP. The supplied data does not state whether authentication is required.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.
What should be done if the device cannot be patched?
The data indicates the affected product is unsupported and that the vendor did not respond to the disclosure. Restrict remote access to the device and plan to replace it with a supported product.