CVE-2025-28145

Summary

CVE-2025-28145 is a command injection vulnerability affecting the Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15. The issue lies in the /boafrm/formDiskFormat partition where an attacker can inject malicious commands, potentially gaining unauthorized access to the system or causing denial-of-service conditions. Successful exploitation could lead to significant security risks, including data theft or router misconfiguration. Users are advised to update their routers to the latest firmware as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.