Remote Code Execution Vulnerability in EDIMAX BR-6288ACL Router
CVE-2023-33722

8.8HIGH

Key Information:

Vendor

Edimax

Status
Br-6288acl Firmware
Vendor
CVE Published:
31 May 2023

What is CVE-2023-33722?

The EDIMAX BR-6288ACL v1.12 has been identified with a vulnerability that allows attackers to execute arbitrary code remotely through manipulation of the pppUserName parameter. This vulnerability could potentially allow an authenticated user to gain unauthorized access and control over the device, leading to serious security risks and data breaches. Users are encouraged to apply necessary security patches and follow best practices to mitigate the risks associated with this vulnerability.

References

https://shimo.im/docs/pmkxQ1GQ4DTowANr
https://docs.google.com/document/d/1KNuU0nVd4oHMZiKgfs45w...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-33722 : Remote Code Execution Vulnerability in EDIMAX BR-6288ACL Router