This vulnerability affects Edimax BR-6428nC devices running firmware versions 1.0 through 1.16. It involves a buffer overflow triggered by crafted input to the pptpDfGateway argument in the /goform/setWAN endpoint. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service. The vendor has not issued any advisory or patch, and the exploit has been publicly disclosed. The CVSS 4.0 score is 8.7, reflecting high impact and ease of exploitation without privileges or user interaction.

Successful exploitation of this buffer overflow can lead to remote code execution or denial of service on affected Edimax BR-6428nC devices. Because the attack vector is remote and requires no user interaction or privileges, the risk to exposed devices is significant. The public disclosure of exploit code increases the likelihood of attacks. No vendor mitigation or patch is currently available, leaving devices vulnerable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting remote access to the affected device, disabling vulnerable services if possible, or replacing the device with a secure alternative until a patch is available.