CVE-2026-108914: Buffer Overflow in Edimax BR-6208AC

This vulnerability involves a buffer overflow in an unspecified function related to /goform/formWlSiteSurvey in Edimax BR-6208AC firmware version 1.32. The issue arises from improper handling of the 'ifname' argument, allowing remote attackers to trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 9.4, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, availability, and security requirements. Exploit code is publicly available. The vendor was contacted but did not respond, and the product is no longer maintained or supported.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or cause denial of service on the affected device. Given the critical CVSS score and the high impact on confidentiality, integrity, and availability, this poses a severe risk to the affected router. Since the product is no longer supported, no official fixes or mitigations are provided by the vendor.

No official patch or fix is available as the product is no longer supported and the vendor has not responded to the disclosure. Users should consider discontinuing use of the affected firmware version 1.32 on Edimax BR-6208AC devices or replacing the device with a supported model. Network-level protections such as firewall rules to restrict access to the device's management interfaces may reduce exposure but do not fully mitigate the vulnerability.