Medium severity · published Feb 24, 2025
CVE-2025-1612
A vulnerability was found in Edimax BR-6288ACL 1.30
6.1
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Br-6288acl Firmware · Edimax
1.30 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1612
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1612
Permissions Required
https://vuldb.com/?ctiid.296602
Third Party Advisory
https://vuldb.com/?id.296602
Third Party Advisory
https://vuldb.com/?submit.501309
More from Br-6288acl Firmware
8.8
CVE-2023-33722
EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter
4.8
CVE-2026-1971
Edimax BR-6288ACL wiz_WISP24gmanual.asp wiz_WISP24gmanual cross site scripting