A cross-site request forgery vulnerability in Edimax EW-7438RPn-v3 Mini devices allows remote attackers to execute arbitrary commands, creating a significant risk of full device compromise.

The device is susceptible to a cross-site request forgery (CSRF) attack targeting the /goform/mp endpoint. An attacker can trick an authenticated user into executing malicious commands with the privileges of that user, leading to remote code execution.

Successful exploitation of this vulnerability allows an unauthenticated attacker to gain remote code execution capabilities on the wireless range extender. This could enable an attacker to pivot into the local network, intercept traffic, or modify device configurations, leading to a complete loss of confidentiality and integrity for network communications. Given the CVSS score of 8.1, this represents a high-severity threat to business operations.

Immediate Action: Users should update the device firmware to the latest available version provided by Edimax. If an update is not available for this specific hardware, the device should be isolated from the public internet or replaced.

Proactive Monitoring: Network administrators should monitor for anomalous outbound traffic originating from the range extender, particularly connections to unknown external servers via HTTP or shell-related protocols.

Compensating Controls: Ensure the administrative interface is not exposed to the public internet. Implement strict network segmentation to limit the impact if the device is compromised.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID 48318).

This vulnerability presents a severe risk because it allows for unauthorized command execution on network infrastructure. Organizations utilizing Edimax EW-7438RPn-v3 Mini devices must prioritize patching these systems immediately. If firmware updates cannot be applied, the devices should be decommissioned or restricted to non-critical network segments to prevent potential lateral movement.