Medium severity · published Feb 3, 2026
CVE-2020-37096
Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
EW-7438RPn Mini · EDIMAX Technology Co., Ltd.
1.13 · source: vendor
EM
Ew-7438rpn Mini Firmware · Edimax
1.13 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-37096
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-37096
Product
https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/
Exploit
https://www.exploit-db.com/exploits/48366
Broken Link
https://www.vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering
More from EW-7438RPn Mini
7.5
CVE-2020-37097
Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)