PT-2026-5846 · Edimax · Edimax Ew-7438Rpn

Besim Altinok · Published 2026-02-03 · Updated 2026-02-20 · CVE-2020-37097

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.13

Description The Edimax EW-7438RPn version 1.13 contains a flaw that allows disclosure of WiFi network configuration details. An attacker can access the wlencrypt wiz.asp file to retrieve sensitive information, including the WiFi network name and the plaintext password stored in device configuration variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-37097

Affected Products

Edimax Ew-7438Rpn

References · 7

• 🔥 https://exploit-db.com/exploits/48365 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37097 · Security Note
• https://osv.dev/vulnerability/CVE-2020-37097 · Vendor Advisory
• https://edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini · Note
• https://t.me/CVEtracker/43650 · Telegram Post
• https://vulncheck.com/advisories/edimax-ew-rpn-information-disclosure-wifi-password · Note
• https://t.me/cveNotify/152593 · Telegram Post