Edimax BR-6478AC V3 Command Injection Vulnerability Allowing Remote Code Execution

A remote code execution vulnerability has been identified in the Edimax BR-6478AC V3 router, specifically in version 1.0.15. The issue arises in the function sub_44CCE4 within the file /boafrm/formSysCmd, where improper handling of the sysCmd argument allows for OS command injection. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Reproduction

To reproduce this vulnerability, upload the firmware version 1.0.15 onto the Edimax BR-6478AC V3 router using the Edimax Firmware Updater. After the firmware is installed, access the router's web interface and navigate to the command injection vulnerability point in the /boafrm/formSysCmd file. The vulnerability can be exploited by manipulating the sysCmd argument to execute arbitrary OS commands. This can be done using a tool like Burp Suite to intercept and modify the request.