CVE-2020-37150CWE-201

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure

High · published February 5, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

🚨 Unauthenticated access alert! An attacker can snag your Wi-Fi SSID and security key from the Edimax EW-7438RPn-v3 Mini just by sending a simple GET request! ⚡ Think of this vulnerability like leaving a welcome mat outside your front door with your house keys taped underneath — it's a blatant invitation for intruders. Anyone coming by can quickly lift the mat and walk right in! This means that anyone with malicious intent could easily access your Wi-Fi network without any authentication, potentially leading to unauthorized access to your devices and sensitive information. If your network is compromised, it could lead to serious privacy breaches or even data theft!

Put simply

Think of this vulnerability like leaving a welcome mat outside your front door with your house keys taped underneath — it's a blatant invitation for intruders. Anyone coming by can quickly lift the mat and walk right in! The CVE-2020-37150 vulnerability allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, where they can retrieve the Wi-Fi SSID and security key without any form of verification. It's a straightforward exploit that poses a significant risk.

What to do

This means that anyone with malicious intent could easily access your Wi-Fi network without any authentication, potentially leading to unauthorized access to your devices and sensitive information. If your network is compromised, it could lead to serious privacy breaches or even data theft! To protect yourself, it’s crucial to update your Edimax EW-7438RPn-v3 Mini to the latest firmware version that addresses this vulnerability. Additionally, ensure that the device is properly set up and secured to prevent unauthorized access in the future. You’ve got this! Follow these steps and you'll have your Wi-Fi network locked down in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00798 · 56.1th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-02-05T16:13Z
EPSS history
Timeline
  • 05 FEB 16:13Z
    Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure
    cvelistv5