Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and securi…

CVE-2020-37150 affects Edimax EW-7438RPn-v3 Mini version 1.27, allowing unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode. This vulnerability discloses sensitive Wi-Fi credentials including SSID and security key. Attackers can retrieve wireless passwords by sending a simple GET request to the vulnerable endpoint. The flaw requires no authentication and exposes critical network access information. This represents a significant security risk for affected wireless range extender devices.