Edimax BR-6208AC Command Injection Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A command injection vulnerability has been identified in the Edimax BR-6208AC router, specifically in version V2_1.02. The issue arises in the Web setWAN handler, where the pppUserName field is transmitted to a shell command using the system() function without adequate input sanitization. This flaw enables attackers to inject malicious commands into the pppUserName field, potentially leading to arbitrary code execution on the device.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the affected device.
Added: Jan 9, 2026, 5:23 PM
Updated: Jan 9, 2026, 5:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
0.0relevance
1.9threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.