Home

Description

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.

PUBLISHED Reserved 2026-02-01 | Published 2026-02-03 | Updated 2026-02-04 | Assigner VulnCheck




MEDIUM: 5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Problem types

Cross-Site Request Forgery (CSRF)

Product status

1.13
affected

Credits

Besim ALTINOK finder

References

www.exploit-db.com/exploits/48366 (ExploitDB-48366) exploit

www.edimax.com/...i-fi_range_extenders_n300/ew-7438rpn_mini/ (Edimax EW-7438RPn Product Homepage) product

www.vulncheck.com/...ross-site-request-forgery-mac-filtering (VulnCheck Advisory: Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)) third-party-advisory

cve.org (CVE-2020-37096)

nvd.nist.gov (CVE-2020-37096)

Download JSON