CVE-2025-15256 — HIGH (7.3)

Vulnerability Description

A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Edimax confirms this issue: "The product mentioned, EDIMAX BR-6208AC V2, has reached its End of Life (EOL) status. It is no longer supported or maintained by Edimax, and it is no longer available for purchase in the market. Consequently, there will be no further firmware updates or patches for this device. We recommend users upgrade to newer models for better security." This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Edimax	Br-6208Ac Firmware	1.02
Edimax	Br-6208Ac	2.0

Related Weaknesses (CWE)

CWE-74 CWE-77

References

https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Command-Injection-VulnerabExploitThird Party Advisory
https://vuldb.com/?ctiid.338646Permissions RequiredVDB Entry
https://vuldb.com/?id.338646Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.722014Third Party AdvisoryVDB Entry
https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Command-Injection-VulnerabExploitThird Party Advisory

FAQ

What is CVE-2025-15256?

CVE-2025-15256 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manip...

How severe is CVE-2025-15256?

CVE-2025-15256 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-15256?

Check the references section above for vendor advisories and patch information. Affected products include: Edimax Br-6208Ac Firmware, Edimax Br-6208Ac.