| Title | Edimax BR-6208AC BR-6208AC_1.32 Command Injection |
|---|
| Description | A vulnerability was found in EDIMAX BR-6208AC Firmware BR-6208AC_1.32. It has been rated as critical. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. The manipulation of the argument tftpsIP leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability is a Pre-authentication Remote Code Execution vulnerability.It can execute any command. |
|---|
| Source | ⚠️ https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formAutoFWupgrade |
|---|
| User | lcyf-fizz (UID 82520) |
|---|
| Submission | 09/14/2026 10:41 (1 month ago) |
|---|
| Moderation | 10/11/2026 17:52 (27 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 416729 [Edimax BR-6208AC 1.32 formAutoFWupgrade tftpsIP command injection] |
|---|
| Points | 20 |
|---|