Executive brief
The Edimax BR-6214K router's wireless management interface contains a flaw that allows authenticated administrators to execute arbitrary system commands through a manipulated parameter. An attacker with valid web management credentials could run commands with full system privileges, potentially compromising the router's operation, stealing data, or using it as a foothold for network attacks.
Technical details
This is an OS command injection vulnerability (CWE-78) in the /goform/asp_WlanMP endpoint of Edimax BR-6214K firmware version 1.40. The vulnerable component fails to sanitize the ateFunc parameter before passing it to a system() call that constructs a shell command (/bin/rftest.sh). An authenticated attacker can inject shell metacharacters (e.g., ;id;#) to execute arbitrary commands with the privileges of the Boa web server, which runs as root. Authentication is required (valid web-management credentials), but the vulnerability is remotely exploitable over the network. A public proof-of-concept exists; the vendor did not respond to early disclosure.
Affected products
- Edimax BR-6214K 1.40
Timeline
- 2026-08-31: disclosed: CVE-2026-82702 published on NVD