PT-2025-14891 · Edimax · Edimax Ac1200 Wave 2 Dual-Band Gigabit Router Br-6478Ac V3

Regainer27 · Published 2025-04-04 · Updated 2025-04-08 · CVE-2025-28146

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 version 1.0.15

Description A command injection issue was discovered via the fota url in the "/boafrm/formLtefotaUpgradeQuectel" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world incidents.

Recommendations For Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 version 1.0.15, consider restricting access to the /boafrm/formLtefotaUpgradeQuectel API endpoint to minimize the risk of exploitation. Avoid using the fota url parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

BDU:2025-05009

CVE-2025-28146

Affected Products

Edimax Ac1200 Wave 2 Dual-Band Gigabit Router Br-6478Ac V3

References · 8

• 🔥 https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/3 · Exploit
• 🔥 https://gist.github.com/regainer27/469a6f2b694a76c3b58249b27fdd0881 · Exploit
• https://osv.dev/vulnerability/CVE-2025-28146 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05009 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-28146 · Security Note
• https://t.me/cvetracker/20828 · Telegram Post
• https://t.me/cvedetector/22145 · Telegram Post
• https://twitter.com/CVEnew/status/1908438506143154216 · Twitter Post