CVE-2020-37097
Unknown
Unknown - Not Provided
Information Disclosure in Edimax EW-7438RPn via wlencrypt_wiz.asp
Publication date: 2026-02-03
Last updated on: 2026-02-20
Assigner: VulnCheck
Description
Description
Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device configuration variables.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| edimax | ew-7438rpn_mini_firmware | 1.13 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-522 | The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. |