CVE-2025-34029 Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp

What is CVE-2025-34029?

CVE-2025-34029 is a critical command injection vulnerability in Edimax EW-7438RPn Mini, published on 20 Jun 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell commands directly, resulting in command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC.

Weakness: CWE-78

Which versions are affected by CVE-2025-34029?

It affects 1 product.

Products include Edimax Ew-7438rpn Mini Firmware.

How do I fix CVE-2025-34029?

No fix has been published for CVE-2025-34029 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-34029 being exploited?

There is no known exploitation of CVE-2025-34029 in the wild and no public exploit code.

Other vulnerabilities in Edimax EW-7438RPn Mini

• CVE-2025-34024 Edimax EW-7438RPn Mini OS Command Injection via mp.asp Critical 9.4
• CVE-2020-37125 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Critical 9.3
• CVE-2020-37150 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure High 8.7
• CVE-2020-37097 Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password) High 8.7
• CVE-2020-37149 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution Medium 5.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-67j5-v3fg-v9wq.