Insufficient Compartmentalization in Edimax BR-6208AC V1 Devices

CVE-2019-13269

What is CVE-2019-13269?

Edimax BR-6208AC V1 devices exhibit a significant flaw due to insufficient compartmentalization between host and guest networks. This weakness allows the potential for cross-network data leakage. When a DHCP Request is made, the device erroneously sends NAK messages to both network segments with the same Transaction ID found in the original request. This misconfiguration can allow attackers to exploit the protocol, leading to unauthorized data transmission between networks, effectively compromising the integrity and confidentiality of network communications.

References