Edimax BR-6208AC Open Redirect Vulnerability in Web-Based Configuration Interface

An open redirect vulnerability has been identified in the Edimax BR-6208AC router, specifically in versions 1.02 and 1.03. The issue arises in the web-based configuration interface, within the 'formALGSetup' function of the '/goform/formALGSetup' file. This vulnerability allows for the manipulation of the 'wlan-url' parameter, creating an open redirect. The flaw can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability allows for open redirect, which can be used to conduct phishing attacks by redirecting users to malicious websites.

Remediation

Edimax has stated that the BR-6208AC V2 has reached its end-of-life status and is no longer supported or maintained. As such, no firmware updates or patches are available for this device. Users are advised to upgrade to newer models for better security.