This vulnerability involves a buffer overflow in the POST Request Handler component of Edimax BR-6428NS firmware version 1.10. Specifically, the formL2TPSetup function improperly processes the L2TPUserName argument, allowing an attacker to remotely cause a buffer overflow. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not issued any fix or advisory, and no official remediation is available.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of the device. Since the exploit is publicly available, affected devices are at increased risk, especially given the lack of vendor response or patch.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider mitigating exposure by disabling vulnerable services if possible, restricting network access to the device, or replacing the device with a non-vulnerable model. Monitor for any vendor updates or third-party patches.