CVE-2011-4502: The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 611...

Security readout for executives and security teams

This CVE describes command execution in the UPnP IGD feature of several older Edimax-derived consumer routers. If reachable, an attacker could cause the router to run injected commands. Business risk is highest where these devices still provide network edge connectivity or expose UPnP beyond trusted networks. Exposure is likely limited to legacy routers explicitly listed: Edimax BR-6104K, Edimax 6114Wg, Canyon-Tech CN-WF512/CN-WF514, Sitecom WL-153, and Sweex LB000021 at the cited firmware levels. Prioritize remediation where listed devices remain in production at network edges, branch offices, labs, or unmanaged legacy environments. Because these are old consumer routers, replacement may be more practical than prolonged mitigation. Mitigation focus: Inventory networks for the exact affected router models and firmware versions.; Upgrade Edimax BR-6104K to firmware 3.25 or later where available.; Upgrade Sitecom WL-153 to firmware 1.39 or later where available..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.