CVE-2025-34029

Deeper analysis

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior. The flaw resides in the syscmd.asp form handler at the /goform/formSysCmd endpoint, where the sysCmd parameter accepts unsanitized input that is passed directly to the underlying system shell, enabling execution as the root user. The issue is tracked as CWE-78 and carries a CVSS 4.0 score of 9.4.

A remote authenticated attacker can supply arbitrary shell commands through the sysCmd parameter to achieve full command execution on the device. Successful exploitation grants the attacker root-level control over the affected range extender, allowing arbitrary system modification, data access, or further lateral movement within the network. Evidence of real-world exploitation attempts against this vulnerability was recorded by the Shadowserver Foundation on 2024-09-14 UTC.

The provided references include a VulnCheck advisory, an Exploit-DB entry, a Broadcom attack signature, and the vendor product page, but contain no explicit statements on patches or mitigation steps. The associated EPSS score remains flat at 0.0535 with no material increase observed after disclosure.