PT-2026-5845 · Edimax · Edimax Ew-7438Rpn

Besim Altinok · Published 2026-02-03 · Updated 2026-02-20 · CVE-2020-37096

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.13

Description The Edimax EW-7438RPn version 1.13 contains a cross-site request forgery issue in the MAC filtering configuration interface. An attacker can create malicious web pages to deceive users into adding unauthorized MAC addresses to the device’s filtering rules without their knowledge. The vulnerability allows attackers to manipulate the device's MAC filtering settings.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the MAC filtering feature until a patch is available.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-37096

Affected Products

Edimax Ew-7438Rpn

References · 7

• 🔥 https://exploit-db.com/exploits/48366 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37096 · Security Note
• https://osv.dev/vulnerability/CVE-2020-37096 · Vendor Advisory
• https://edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini · Note
• https://t.me/cveNotify/152592 · Telegram Post
• https://vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering · Note
• https://t.me/CVEtracker/43649 · Telegram Post