CVE-2024-48418: Edimax Br-6476ac Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with access to the web interface to inject and execute arbitrary shell commands.

Affected products

• Edimax Br-6476ac Firmware: version 1.06 only

Published 2025-01-27. Last modified 2026-07-05.