CVE-2025-28146
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 4, 2025
Updated: Apr 15, 2025
CWE ID 94
Summary
CVE-2025-28146 is a newly discovered vulnerability affecting the Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15. Hackers can exploit this command injection flaw through the fota_url parameter in the /boafrm/formLtefotaUpgradeQuectel path. Successful exploitation allows attackers to execute arbitrary commands with root privileges, potentially leading to unauthorized access, data theft, or system damage. Users are advised to update their routers as soon as a patch is available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.