CVE-2020-37096: Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-02-03 · updated 2026-06-17
Weakness: CWE-352

Description

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.

Affected products

Edimax EW-7438RPn Mini: 1.13

References

https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/
https://www.exploit-db.com/exploits/48366
https://www.vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering

Get alerted when CVE-2020-37096 or the next vulnerability affects your stack