This vulnerability involves a buffer overflow triggered by improper handling of the pptpDfGateway argument in the /goform/setWAN file of Edimax BR-6428nC devices running firmware up to version 1.16. The vulnerability allows remote attackers to cause a buffer overflow condition, potentially leading to denial of service or code execution. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued any patch or advisory, and the vulnerability remains unmitigated.

Successful exploitation of this vulnerability could allow remote attackers to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution on affected devices. The impact affects confidentiality, integrity, and availability of the device. Given the remote attack vector and lack of required privileges or user interaction, the vulnerability poses a significant risk to affected systems.

No official patch or remediation is currently available from the vendor. Users of Edimax BR-6428nC devices up to firmware version 1.16 should consider mitigating exposure by restricting remote access to the device management interface, disabling unused WAN services if possible, or replacing affected devices with models not vulnerable to this issue. Monitor vendor channels for any future advisories or patches addressing this vulnerability.