CVE-2024-48419

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an attacker with access to the web interface to inject and execute arbitrary shell commands, with "root" privileges.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

5.36% chance of exploitation in the next 30 days, 92th percentile

Published

2025-01-27

Updated

2026-07-05

Proof-of-concept exploits (1)

• SpikeReply/advisories/blob/c271ddb997bc0263274118acc380bc71ce9c316b/cve/edimax/cve-2024-4…

References

• CVE Record
• NVD entry

Related

• CVE-2023-51146
• CVE-2023-51147
• CVE-2023-51148
• CVE-2024-48416
• CVE-2024-48417
• CVE-2024-48418