CVE-2024-48417 identifies a Cross Site Scripting (XSS) vulnerability in Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06. The vulnerability exists in the /bin/goahead web server component, exploitable through the /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter endpoints. The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges, and user interaction, with low attack complexity. The vulnerability impacts confidentiality and integrity but not availability. No patch or official remediation level has been published, and no known exploits are reported in the wild.

Successful exploitation of this XSS vulnerability could allow an attacker on the adjacent network to execute arbitrary scripts in the context of the router's web interface, potentially leading to information disclosure and integrity compromise of the router's management functions. There is no impact on availability reported. The attack requires user interaction and no privileges, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict access to the router's management interface to trusted networks and users only. Monitor vendor communications for updates regarding patches or mitigations.