CVE-2020-37096 Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
Attackers can trick users into adding unauthorized MAC addresses to the device's filtering rules via cross-site request forgery.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-37096?
CVE-2020-37096 is a medium-severity vulnerability in EDIMAX Technology Co., Ltd. EW-7438RPn Mini, published on 3 Feb 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.
Weakness: CWE-352
Which versions are affected by CVE-2020-37096?
It affects 1 product.
Products include Edimax Ew-7438rpn Mini Firmware.
How do I fix CVE-2020-37096?
No fix has been published for CVE-2020-37096 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-37096 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-37096 exists.
Other vulnerabilities in EDIMAX Technology Co., Ltd. EW-7438RPn Mini
- CVE-2025-34024 Edimax EW-7438RPn Mini OS Command Injection via mp.asp
- CVE-2025-34029 Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp
- CVE-2020-37125 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution
- CVE-2020-37150 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure
- CVE-2020-37097 Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)
Sources
Also known as GHSA-gjcm-5wgj-fj7j.