Vulnerability · Published Feb 3, 2026 · Assigned by VulnCheck
CVE-2020-37096Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
Medium 5.3
In plain English
A medium-severity cross-site request forgery in EW-7438RPn Mini from EDIMAX Technology Co., Ltd.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 92.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| EDIMAX Technology Co., Ltd. | EW-7438RPn Mini | 1.13 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
- ExploitDB-48366 exploit
- Edimax EW-7438RPn Product Homepage product
- VulnCheck Advisory: Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) third-party-advisory