PT-2025-52401 · Edimax · Edimax Br-6208Ac

Tian · Published 2025-12-19 · Updated 2025-12-19 · CVE-2025-14910

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.02

Description A path traversal issue exists in the FTP Daemon Service component of Edimax BR-6208AC version 1.02, specifically within the handle retr function. This allows for remote manipulation of the system. The exploit is publicly available. The product is no longer supported by the vendor and has been discontinued for five years.

Recommendations Disable the FTP service on the device to mitigate the risk. Upgrade to newer, supported models.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-14910

Affected Products

Edimax Br-6208Ac

References · 9

• 🔥 https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Path-Traversal-Vulnerability-in-FTPd-2c4b5c52018a80fb8812f7d510abf558?source=copy_link · Exploit
• https://osv.dev/vulnerability/CVE-2025-14910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14910 · Security Note
• https://t.me/cveNotify/146286 · Telegram Post
• https://vuldb.com/?submit.713704 · Note
• https://twitter.com/CVEnew/status/2002099197781422337 · Twitter Post
• https://vuldb.com/?ctiid.337435 · Note
• https://t.me/CVEtracker/40225 · Telegram Post
• https://vuldb.com/?id.337435 · Note