This vulnerability affects Edimax BR-6208AC routers running firmware up to version 1.02. It involves a buffer overflow triggered by specially crafted input to the pptpDfGateway parameter in the /goform/setWAN endpoint. The vulnerability can be exploited remotely without authentication or user interaction, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation. No official fix or vendor advisory is available, and the vendor has not responded to disclosure attempts.

Successful exploitation may allow remote attackers to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on affected devices. Given the remote attack vector and lack of required privileges or user interaction, the vulnerability poses a significant risk to the confidentiality, integrity, and availability of the device and network traffic passing through it.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting remote access to the device management interface, disabling vulnerable services if possible, or replacing the device with a secure alternative until a patch is available.