CVE-2025-34024 Edimax EW-7438RPn Mini OS Command Injection via mp.asp

What is CVE-2025-34024?

CVE-2025-34024 is a critical command injection vulnerability in Edimax EW-7438RPn Mini, published on 20 Jun 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.

Weakness: CWE-78

Which versions are affected by CVE-2025-34024?

It affects 1 product.

Products include Edimax Ew-7438rpn Mini Firmware.

How do I fix CVE-2025-34024?

No fix has been published for CVE-2025-34024 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-34024 being exploited?

There is no known exploitation of CVE-2025-34024 in the wild and no public exploit code.

Other vulnerabilities in Edimax EW-7438RPn Mini

• CVE-2025-34029 Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp Critical 9.4
• CVE-2020-37125 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Critical 9.3
• CVE-2020-37150 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure High 8.7
• CVE-2020-37097 Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password) High 8.7
• CVE-2020-37149 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution Medium 5.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6jw4-m8h9-g536.