CVE-2025-22905

CRITICAL

Edimax re11s_firmware Improper Control of Generation of Code ('Code Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2025-22905 has a selected CVSS score of 9.8 (critical).

Description

RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 9, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 16, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

re11s_firmware

Browse Edimax / re11s_firmware
VulnCheckVersion data not supplied

References

4