CVE-2026-82702: Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injection
A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerable endpoint can be reached remotely, but exploitation requires high privileges. No user interaction is required.
Which input is vulnerable?
The issue is triggered by manipulating the ateFunc argument handled by the system function in www/wlanMP.asp.
Is public exploit code available?
Yes. The available information states that an exploit is publicly available and might be used.
Is a vendor fix available?
No vendor response is reported. The vendor was contacted before disclosure but did not respond; the provided data does not identify a patch or fixed version.