CVE-2026-9424: Edimax EW-7438RPn Content-Type formWlanMP os command injection
A weakness has been identified in Edimax EW-7438RPn 1.31. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component Content-Type Handler. Executing a manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPower5/e2pTxPower6/e2pTxPower7/e2pTx2Power1/e2pTx2Power2/e2pTx2Power3/e2pTx2Power4/e2pTx2Power5/e2pTx2Power6/e2pTx2Power7/ateTxFreqOffset/ateMode/ateBW/ateAntenna/e2pTxFreqOffset/e2pTxPwDeltaB/e2pTxPwDeltaG/e2pTxPwDeltaMix/e2pTxPwDeltaN/readE2P can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax EW-7438RPnfrom your environment.Remove or replace the affected device from production networks if it cannot be patched or fully isolated.
- Configuration
Disable remote/administration access to the device's web interface to prevent remote exploitation of the /goform/formWlanMP endpoint.
Edimax EW-7438RPn web interface remote_management_enabled = false - Compensating control
Block access to the device management interface (HTTP/HTTPS) and the /goform/formWlanMP endpoint from untrusted networks via firewall/ACLs; restrict management access to specific trusted IPs and isolate the device from the internet.
- Operational
Monitor logs for attempts to access /goform/formWlanMP, isolate and investigate any suspected compromises, and apply vendor firmware updates when they become available to remediate the command injection vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9424?
The severity of CVE-2026-9424 is rated as medium with a score of 6.3.
What are the potential impacts of CVE-2026-9424?
CVE-2026-9424 could allow an attacker to execute arbitrary OS commands on the Edimax EW-7438RPn device.
How do I fix CVE-2026-9424?
To fix CVE-2026-9424, users should update the Edimax EW-7438RPn firmware to the latest version that addresses this vulnerability.
Is CVE-2026-9424 easily exploitable?
Yes, CVE-2026-9424 can be exploited remotely with low complexity, making it a significant concern.
What is the affected component in CVE-2026-9424?
The affected component in CVE-2026-9424 is the Content-Type Handler in the /goform/formWlanMP function.