This vulnerability affects Edimax BR-6428nC version 1.16 and involves a stack-based buffer overflow caused by improper handling of the interface1/interface2 argument in the Wireless Wizard Handler component's /goform/formWizSurvey file. The flaw allows remote attackers to trigger a buffer overflow condition, which could lead to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 score of 5.3 (medium severity) with network attack vector, low complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability. Public exploit code is available, but no vendor patch or mitigation details are provided.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow on the affected device, potentially leading to arbitrary code execution or denial of service. The impact is rated medium based on the CVSS 4.0 score of 5.3. The vulnerability requires no user interaction and can be exploited remotely over the network with low complexity and no privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, it is recommended to restrict network access to the affected device's management interfaces and monitor for exploit attempts targeting the /goform/formWizSurvey endpoint.