This vulnerability exists in the Edimax BR-6428NS router firmware version 1.10 within the POST request handler function formPPTPSetup. Specifically, improper handling of the pptpUserName parameter leads to a buffer overflow condition. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not issued any patch or official remediation, and no cloud service is involved.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or disrupt the router's operation, impacting confidentiality, integrity, and availability of the device. Given the high CVSS score and remote attack vector, affected devices are at significant risk if exposed to untrusted networks. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting access to the affected device's management interface from untrusted networks and monitoring for unusual activity. Replacement or firmware updates from the vendor should be applied once available.