CNNVD-202512-618 Information

CNNVD ID

CNNVD-202512-618

CVE-2025-14094

  • CNNVD Published: 2025-12-05

Description (Chinese)

Edimax BR-6478AC是中国讯舟(Edimax)公司的一款双频千兆路由器。 Edimax BR-6478AC 1.0.15版本存在操作系统命令注入漏洞,该漏洞源于对文件/boafrm/formSysCmd中参数sysCmd的错误操作,可能导致os命令注入。

Description (English)

Edimax BR-6478AC is a double-frequency gigabyte router of the China Station of Information. Edimax BR-6478AC version 1.0.15 contains a bug in the operating system command, which results from an error in the parameter SysCmd in the document/boafrm/formSysCmd, which may lead to an Os command injection.

Hazard Level

High

Vulnerability Type

操作系统命令注入

Affected Vendor

讯舟

Published

2025-12-05

Last Modified

2026-02-24

References

https://github.com/Kriswu1337/CVE/blob/main/EDIMAX/1/3.md https://vuldb.com/?ctiid.334484 https://vuldb.com/?id.334484 https://vuldb.com/?submit.696668 https://access.redhat.com/security/cve/cve-2025-14094

Share on: