PT-2025-52401 · Edimax · Edimax Br-6208Ac

Tian · Publicado 2025-12-19 · Atualizado 2025-12-19 · CVE-2025-14910

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.02

Description A path traversal issue exists in the FTP Daemon Service component of Edimax BR-6208AC version 1.02, specifically within the handle retr function. This allows for remote manipulation of the system. The exploit is publicly available. The product is no longer supported by the vendor and has been discontinued for five years.

Recommendations Disable the FTP service on the device to mitigate the risk. Upgrade to newer, supported models.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-14910

Produtos afetados

Edimax Br-6208Ac

Referências · 9

• 🔥 https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Path-Traversal-Vulnerability-in-FTPd-2c4b5c52018a80fb8812f7d510abf558?source=copy_link · Exploit
• https://t.me/cveNotify/146286 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-14910 · Aviso do Fabricante
• https://vuldb.com/?submit.713704 · Nota
• https://twitter.com/CVEnew/status/2002099197781422337 · Publicação no Twitter
• https://vuldb.com/?ctiid.337435 · Nota
• https://t.me/CVEtracker/40225 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-14910 · Nota de Segurança
• https://vuldb.com/?id.337435 · Nota