This vulnerability involves a buffer overflow triggered by improper handling of the pptpDfGateway argument in the /goform/setWAN function of Edimax BR-6208AC firmware up to version 1.02. The flaw allows remote attackers to cause memory corruption, potentially leading to denial of service or arbitrary code execution. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. The vendor has not issued a patch or advisory, and the exploit is publicly available.

Successful exploitation of this buffer overflow vulnerability can result in memory corruption, which may allow an attacker to disrupt device operation or execute arbitrary code remotely. This compromises the confidentiality, integrity, and availability of the affected router. Given the remote attack vector and lack of required privileges, the risk to exposed devices is significant. However, no active exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider mitigating exposure by restricting remote access to the device management interface and monitoring for unusual activity. Applying network-level protections such as firewall rules to block unauthorized access to the /goform/setWAN endpoint may reduce risk until a patch is released.