Vulnerability Details CVE-2020-37125
Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint. Attackers can exploit the vulnerability by sending crafted POST requests with command injection payloads to download and execute malicious scripts on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2020-37125
-
cpe:2.3:h:edimax:ew-7438rpn_mini:3
-
cpe:2.3:o:edimax:ew-7438rpn_mini_firmware:1.27