Edimax Br-6428ns Firmware vulnerabilities

4 CVEs affecting Edimax Br-6428ns Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31986, published 2023-05-15.

More from Edimax.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-45768, published 2023-02-07. High severity, CVSS 8.8. EPSS: 28.7% chance of exploitation in the next 30 days. Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.
• CVE-2023-31983, published 2023-05-12. Critical severity, CVSS 9.8. EPSS: 24.9% chance of exploitation in the next 30 days. A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.
• CVE-2023-31986, published 2023-05-15. Critical severity, CVSS 9.8. EPSS: 8.2% chance of exploitation in the next 30 days. A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.
• CVE-2023-31985, published 2023-05-12. Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days. A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations.