CVE-2026-1972

Katalog CVE

CVSS 7.5 · High EPSS 0,67%

Kerentanan Use of Default Credentials pada edimax br-6208ac firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

6 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1392: Use of Default Credentials

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Weak-Password-Authentication-Vulnerability-in-auth_check... exploit · advisory pihak ketiga
• https://vuldb.com/?id.344494 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.744032 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.344494 permissions required · vdb entry