Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution

The primary impact of CVE-2020-37149 is the potential for remote command execution on the affected Edimax router. An attacker could craft a malicious form submitted through the /goform/mp endpoint, leveraging the user's existing authentication to execute arbitrary commands with the user's privileges. This could allow attackers to modify router settings, access sensitive data stored on the device, or even gain complete control over the router. Successful exploitation could lead to a compromise of the network the router protects, enabling further attacks against connected devices.

Small businesses and home users relying on Edimax EW-7438RPn Mini routers with vulnerable firmware versions are at risk. Specifically, those with weak password policies or who frequently access the router's web interface from untrusted networks are more susceptible to CSRF attacks.

1. 2026-02-05Disclosure

   disclosure

1. Reservado2026-02-03
2. Publicada2026-02-05
3. Modificada2026-03-05
4. EPSS atualizado2026-03-23

The primary mitigation for CVE-2020-37149 is to upgrade the Edimax EW-7438RPn Mini firmware to a patched version. Unfortunately, a specific fixed version is not provided in the CVE details. Until a patch is available, consider implementing stricter input validation on the /goform/mp endpoint to prevent malicious commands from being executed. Web Application Firewall (WAF) rules can be configured to detect and block suspicious requests targeting this endpoint. Monitor router logs for unusual activity and unauthorized command executions. After upgrade, confirm by attempting to trigger the vulnerable endpoint with a known malicious payload and verifying that it is blocked.