A vulnerability was identified in Edimax BR-6214K 1.40. (CVE-2026-82702)

CVE-2026-82702 is an OS command injection vulnerability in Edimax BR-6214K version 1.40. It affects the system function in the www/wlanMP.asp file within the asp_WlanMP Endpoint component. Manipulation of the ateFunc argument enables remote attackers with high privileges to execute arbitrary operating system commands. The vulnerability is remotely exploitable without user interaction. The vendor was contacted but did not provide any response or patch. Public exploit code exists, but there are no known exploits in the wild at this time.

Successful exploitation allows an attacker with high privileges to execute arbitrary OS commands remotely, potentially leading to partial confidentiality, integrity, and availability impacts. The CVSS vector indicates low complexity and no user interaction required, but the attacker must have high privileges. This could enable unauthorized control over the affected device.

No official patch or remediation is currently available, and the vendor has not responded to disclosure attempts. Users should monitor vendor communications for updates. Until a fix is released, restricting access to the affected component and limiting high-privilege user access may reduce exposure.