CVE-2025-34024

HIGH EXPLOITED

Edimax EW-7438RPn <1.13 - Command Injection

Title source: llm

Exploitation Summary

CVE-2025-34024 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Besim.

AI-analyzed exploit summary The exploit demonstrates two RCE vulnerabilities in Edimax EW-7438RPn v1.13 via command injection in `mp.asp` and `syscmd.asp` forms. The PoC includes HTTP requests with crafted payloads to execute arbitrary commands as root.

Description

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.

Exploits (1)

exploitdb WORKING POC

by Besim · textwebappshardware

https://www.exploit-db.com/exploits/48377

View Code ZIP pw:eip

The exploit demonstrates two RCE vulnerabilities in Edimax EW-7438RPn v1.13 via command injection in `mp.asp` and `syscmd.asp` forms. The PoC includes HTTP requests with crafted payloads to execute arbitrary commands as root.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Edimax EW-7438RPn v1.13

Auth required

Prerequisites: Network access to the device · Valid admin credentials (Basic Auth)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (4)

Core 4

Core References

Product product

https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/

Exploit, VDB Entry third-party-advisory exploit

https://www.exploit-db.com/exploits/48377

Third Party Advisory third-party-advisory

https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=32163

Exploit, Third Party Advisory third-party-advisory

https://vulncheck.com/advisories/edimax-ew-7438rpn-command-injections

Scores

CVSS v3 8.8

EPSS 0.0432

EPSS Percentile 89.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

VulnCheck KEV 2025-06-20

CWE

CWE-78

Status published

Products (2)

Edimax/Edimax EW-7438RPn Mini < 1.13

edimax/ew-7438rpn_mini_firmware < 1.13

Published Jun 20, 2025

Tracked Since Feb 18, 2026