Krisw

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V3 version 1.0.15 **Description** A security issue exists in Edimax BR-6478AC V3 version 1.0.15. The `sub 416898` function within the `/boafrm/formDebugDiagnosticRun` file is susceptible to os command injection through manipulation of the `host` argument. This allows for remote execution of commands. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V3 version 1.0.15 **Description** A flaw exists in the Edimax BR-6478AC V3 version 1.0.15. The `sub 416990` function within the `/boafrm/formTracerouteDiagnosticRun` file is susceptible to os command injection due to manipulation of the `host` argument. This allows for remote execution of commands. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V3 version 1.0.15 **Description** A flaw exists in Edimax BR-6478AC V3 version 1.0.15 due to a command injection issue. The issue is related to the manipulation of the `sysCmd` argument within the `sub 44CCE4` function of the `/boafrm/formSysCmd` file. This allows for remote execution of operating system commands. The exploit for this issue has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-8400 version 16.07.26A1 **Description** A vulnerability exists in the jhttpd component of the software. The manipulation of the `share enable` argument in the `usb paswd.asp` file leads to a null pointer dereference. This issue can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** Address the issue in D-Link DI-8400 version 16.07.26A1.