PT-2026-1955 · Edimax · Edimax Br-6208Ac

CVE-2025-70161 · Publicado 2026-01-09 · Atualizado 2026-01-12

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EDIMAX BR-6208AC version V2 1.02

Description The EDIMAX BR-6208AC version V2 1.02 is susceptible to Command Injection. The issue occurs because the pppUserName field is passed directly to a shell command using the system() function without sufficient input validation. An attacker can exploit this by injecting malicious commands into the pppUserName field, potentially leading to arbitrary code execution.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2026-05046

CVE-2025-70161

Produtos afetados

Edimax Br-6208Ac

Referências · 7

• 🔥 https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Command-Injection-Vulnerability-in-Web-setWAN-handler-2d3b5c52018a80d7ae8dce2bf5e3294c?source=copy_link · Exploit
• https://twitter.com/CVEnew/status/2009670034143010963 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-05046 · Nota de Segurança
• https://twitter.com/TheHackerWire/status/2010789965102530933 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-70161 · Aviso do Fabricante
• https://t.me/CVEtracker/41864 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-70161 · Nota de Segurança