CVE-2024-48419: Edimax Br-6476ac Firmware

High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days.

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an attacker with access to the web interface to inject and execute arbitrary shell commands, with "root" privileges.

Affected products

• Edimax Br-6476ac Firmware: version 1.06 only

Published 2025-01-27. Last modified 2026-07-05.