VulnerabilityModified
CVE-2022-45768
Command Injection vulnerability in Edimax Technology Co., Ltd.
HIGH 8.8EPSS 28.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 28.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 28.66% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- edimax/br-6428ns firmware
- Source
- cve@mitre.org
References
- https://github.com/Erebua/CVE/blob/main/Edimax.mdExploit, Third Party Advisory
- https://www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/Exploit, Third Party Advisory
- https://github.com/Erebua/CVE/blob/main/Edimax.mdExploit, Third Party Advisory
- https://www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.