CVE-2020-37096

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

CVSS 5.1 MEDIUMEPSS 0.1%CWE-352

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected products

EDIMAX Technology Co., Ltd. · EW-7438RPn Mini

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/https://www.exploit-db.com/exploits/48366 https://www.vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering