PT-2026-5845 · Edimax · Edimax Ew-7438Rpn

Besim Altinok · Publicado 2026-02-03 · Atualizado 2026-02-20 · CVE-2020-37096

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.13

Description The Edimax EW-7438RPn version 1.13 contains a cross-site request forgery issue in the MAC filtering configuration interface. An attacker can create malicious web pages to deceive users into adding unauthorized MAC addresses to the device’s filtering rules without their knowledge. The vulnerability allows attackers to manipulate the device's MAC filtering settings.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the MAC filtering feature until a patch is available.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2020-37096

Produtos afetados

Edimax Ew-7438Rpn

Referências · 7

• 🔥 https://exploit-db.com/exploits/48366 · Exploit
• https://edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37096 · Nota de Segurança
• https://t.me/cveNotify/152592 · Publicação no Telegram
• https://vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering · Nota
• https://t.me/CVEtracker/43649 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2020-37096 · Aviso do Fabricante