CVE-2022-45768

high · 8.8

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.

8.8

CVSS

28.7%

EPSS (exploit prob.)

98th

EPSS percentile

2023-02-07

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
edimax	br-6428ns_firmware	1.20
edimax	br-6428ns	v3

Check a specific version with /api/v1/cve/match.

References

https://github.com/Erebua/CVE/blob/main/Edimax.md
https://www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/
https://github.com/Erebua/CVE/blob/main/Edimax.md
https://www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-45768