Insufficient Compartmentalization in Edimax BR-6208AC V1 Devices

CVE-2019-13271

What is CVE-2019-13271?

The Edimax BR-6208AC V1 devices exhibit a significant security flaw due to inadequate separation between host and guest networks. This vulnerability allows ARP requests to be forwarded without restriction between the networks, enabling potential data leakage. Attackers can exploit this flaw by sending ARP requests to devices on the network, which may allow them to intercept sensitive information or establish a covert communication channel. Unlike routers that appropriately limit ARP forwarding to a network's subnet, the affected devices fail to enforce such restrictions, amplifying the risk of unauthorized access and information exposure.

References