Edimax EW-7438RPn Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in the Edimax EW-7438RPn Mini Wi-Fi range extender, specifically in version 1.13. The issue arises in the wlencrypt_wiz.asp file, where sensitive Wi-Fi network configuration details are exposed. Attackers can access this file to retrieve information such as the Wi-Fi network name and the plaintext password stored in the device's configuration variables.

Impact

Exploitation of this vulnerability allows unauthorized access to sensitive Wi-Fi network information, including the network name and password, which could be used to gain unauthorized access to the Wi-Fi network.

Reproduction

To reproduce this vulnerability, first set up the Edimax EW-7438RPn Mini extender. After the setup is complete, access the wlencrypt_wiz.asp file. This file will disclose information such as the Wi-Fi password, along with other configuration details.