Edimax Ew-7438rpn Mini Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Edimax Ew-7438rpn Mini Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2020-37125 — CVSS 9.8 (critical): Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary…
• CVE-2016-10863 — CVSS 8.8 (high): Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.
• CVE-2025-34024 — CVSS 8.8 (high): An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The…
• CVE-2025-34029 — CVSS 8.8 (high): An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler…
• CVE-2020-37149 — CVSS 8.1 (high): Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An attacker can trick…
• CVE-2020-37150 — CVSS 7.5 (high): Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the…
• CVE-2020-37097 — CVSS 7.5 (high): Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the…
• CVE-2020-37096 — CVSS 5.3 (medium): Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can…