CVE-2026-108915
Received Received - Intake

Buffer Overflow in Edimax BR-6208AC Router

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-13
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-108915
EUVD
EUVD-2026-97725

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Edimax BR-6208AC 1.32

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108915 is a buffer overflow vulnerability in the Edimax BR-6208AC router firmware version 1.32. It occurs in the /goform/formWlanMP endpoint when the ateBW parameter is manipulated in a POST request. The ateBW value is passed to the sprintf function without proper bounds checking, allowing an attacker to overflow a buffer. This can crash the device's web server, making it unresponsive and inaccessible.

Detection Guidance

To detect this vulnerability, check if your Edimax BR-6208AC router is running firmware version BR-6208AC_1.32. You can verify this by accessing the router's web interface or via SSH/telnet if enabled. Use network scanning tools like nmap to identify the device and its firmware version. Monitor for unusual POST requests to /goform/formWlanMP with the ateBW parameter.

Impact Analysis

This vulnerability allows remote attackers to crash the router's web interface, rendering the device unresponsive. An attacker could exploit this to disrupt network access, disable management capabilities, or potentially execute arbitrary code on the device. Since the device is no longer supported, patches are unavailable.

Compliance Impact

This vulnerability does not directly specify impacts on GDPR or HIPAA compliance. However, buffer overflow vulnerabilities in network devices like routers can lead to unauthorized access, data breaches, or service disruptions, which may violate data protection requirements under GDPR or HIPAA if sensitive data is involved.

Mitigation Strategies

Since the device is no longer supported, the only immediate mitigation is to disconnect the Edimax BR-6208AC from the network or power it off to prevent exploitation. Replace the device with a supported alternative to ensure security. Ensure no critical services rely on this router.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108915. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart