The Edimax BR-6428NS router firmware version 1.10 contains a buffer overflow vulnerability in the POST request handler component, specifically in the formWanTcpipSetup function. The vulnerability arises from improper handling of the pppUserName parameter, allowing an attacker to overflow a buffer remotely. This can lead to potential compromise of the device. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The vendor has not provided any advisory or patch, and no official remediation is currently available.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of buffer overflow vulnerabilities, this could lead to full compromise of the router. The exploit is publicly available, increasing the risk of attack, although no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting remote access to the device's management interface and monitoring for suspicious activity. Applying network-level protections such as firewall rules to block unauthorized access to the affected service may reduce risk until an official patch is available.