This vulnerability affects Edimax BR-6208AC firmware version 1.02. The setWAN function in the /goform/setWAN endpoint, specifically in the L2TP Mode component, improperly sanitizes the L2TPUserName argument, enabling remote command injection. An attacker can exploit this flaw remotely without user interaction or elevated privileges. The vulnerability has been publicly disclosed with exploit code available, but the vendor has not issued any fix or advisory. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to low impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially compromising the router's integrity and availability. Given the medium CVSS score and public exploit availability, this vulnerability poses a moderate risk to affected devices. There is no indication of widespread exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor for any vendor advisories or firmware updates addressing this issue. Until a fix is released, consider restricting network access to the device's management interface to trusted hosts only and disable L2TP Mode if not required to reduce exposure.