CVE-2025-15257 - Edimax BR-6208AC Web-based Configuration formRoute command injection

CVE ID : CVE-2025-15257 Published : Dec. 30, 2025, 5:15 p.m. | 1 hour, 21 minutes ago Description : A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Edimax confirms this issue:

Source: Telegram CVE Monitor