This vulnerability affects Edimax BR-6428nC routers running firmware versions 1.0 through 1.16. It involves a command injection flaw in the web interface's /goform/setWAN function, where the pppUserName or pptpUserName parameters are not properly sanitized, allowing an attacker to execute arbitrary commands remotely. The vulnerability requires no user interaction and has a low attack complexity. Although the exploit code has been publicly released, there is no known exploitation in the wild reported. The vendor has not issued any response or patch, and no official remediation level is provided.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device with limited privileges, potentially compromising the router's integrity and availability. This could lead to unauthorized control over the device or network disruption. The medium CVSS score reflects the moderate impact due to limited privileges and lack of user interaction required for exploitation.

No official patch or remediation is currently available from the vendor, as they have not responded to disclosure attempts. Users should monitor vendor communications for updates. Until a fix is issued, consider restricting remote access to the router's web interface and applying network-level controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.