CVE-2026-7682: Edimax BR-6208AC L2TP Mode setWAN command injection
A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of the argument L2TPUserName results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Since the flaw involves remote command injection in L2TP Mode via /goform/setWAN (setWAN) where manipulating the L2TPUserName argument causes injection, restrict external/Internet access to the L2TP Mode web interface/endpoint (/goform/setWAN) so only trusted/admin sources can reach it (e.g., via firewall/ACL).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7682?
CVE-2026-7682 is considered a high severity vulnerability due to its potential for command injection in the affected device.
How do I fix CVE-2026-7682?
To fix CVE-2026-7682, update the Edimax BR-6208AC to the latest firmware version that addresses this vulnerability.
What systems are affected by CVE-2026-7682?
CVE-2026-7682 affects the Edimax BR-6208AC device running firmware version 1.02.
What is the risk associated with CVE-2026-7682?
The risk associated with CVE-2026-7682 includes unauthorized access and execution of arbitrary commands on the affected device.
How can I identify if my Edimax BR-6208AC is vulnerable to CVE-2026-7682?
You can identify if your Edimax BR-6208AC is vulnerable to CVE-2026-7682 by checking if it is running firmware version 1.02.