Cyber Posture

CVE-2025-14093

MediumPublic PoC

Published: 05 December 2025

Published
05 December 2025
Modified
29 April 2026
KEV Added
Patch
CVSS Score 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0020 41.7th percentile
Risk Priority 10 60% EPSS · 20% KEV · 20% CVSS

Description

A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public…

more

and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly prevents OS command injection by requiring validation of the untrusted 'host' input in the traceroute diagnostic function.

prevent

Mandates identification, prioritization, and remediation of the specific command injection flaw, addressing the absence of vendor patches.

prevent

Limits potential damage from injected commands by enforcing least privilege on the high-privilege web server process handling the vulnerable function.

Security SummaryAI

CVE-2025-14093 is an OS command injection vulnerability (CWE-77, CWE-78) in the Edimax BR-6478AC V3 router running firmware version 1.0.15. The flaw affects the sub_416990 function in the /boafrm/formTracerouteDiagnosticRun component, where manipulation of the 'host' argument enables command injection.

The vulnerability is exploitable remotely over the network with low complexity but requires high privileges (PR:H), as indicated by its CVSS v3.1 base score of 4.7 (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L). An attacker with sufficient access can achieve limited impacts on confidentiality, integrity, and availability, such as executing arbitrary OS commands.

Advisories referenced in VulDB entries and a GitHub repository detail the issue, including a public exploit. The vendor was contacted early regarding disclosure but provided no response, leaving no official patches or mitigation guidance available.

Details

CWE(s)

Affected Products

edimax
br-6478ac v3 firmware
1.0.15

MITRE ATT&CK Enterprise TechniquesAI

T1059.008 Network Device CLI Execution
Adversaries may abuse scripting or built-in command line interpreters (CLI) on network devices to execute malicious command and payloads.
T1202 Indirect Command Execution Stealth
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
Why these techniques?

OS command injection in router web diagnostic form (/boafrm/formTracerouteDiagnosticRun) enables indirect command execution (T1202) via unsanitized 'host' input and network device CLI abuse (T1059.008) for arbitrary OS command execution.

References