VulnSocial

CVE-2020-37125Disclosure(edimax / ew-7438rpn_mini)

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint. Attackers can exploit the vulnerability by sending crafted POST requests with command injection payloads to download and execute malicious scripts on the device.

edimax CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ew-7438rpn_mini
  • ew-7438rpn_mini_firmware

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
edimax
Products
ew-7438rpn_miniew-7438rpn_mini_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-05: 2Technical Details · 2026-02-05: 202-05
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2020-37125 Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/… https://www.cve.org/CVERecord?id=CVE-2020-37125

    Post summary

    CVE-2020-37125 is a remote code execution flaw in Edimax EW-7438RPn-v3 Mini 1.27 that lets unauthenticated attackers run arbitrary commands via the /goform/ endpoint, with no PoC, exploit code, active exploitation, or patch details mentioned.

    00010132
    56.5K followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2020-37125: Edimax Technology EW-7438RPn-v3 ... Unauthenticated RCE in Edimax extenders via /goform/mp endpoint needs zero interaction - perfect pivot point for networ... https://zerodaysignal.com/vulnerability/CVE-2020-37125 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    A newly disclosed unauthenticated RCE (CVE-2020-37125) in Edimax EW‑7438RPn‑v3 Wi‑Fi extenders allows zero‑interaction exploitation via the /goform/mp endpoint.

    0001070
    132 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWedimaxew-7438rpn_mini3--
OSedimaxew-7438rpn_mini_firmware1.27--

Explore more

Back to dashboardedimax CVEsew-7438rpn_mini vulnerabilities