What’s Vulnerable › Vulnerabilities

CVE-2020-37097: Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-522

Description

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.

Affected products

• Edimax EW-7438RPn Mini: 1.13

References

• https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/
• https://www.exploit-db.com/exploits/48365
• https://www.vulncheck.com/advisories/edimax-ew-rpn-information-disclosure-wifi-password

Get alerted when CVE-2020-37097 or the next vulnerability affects your stack