This vulnerability involves a buffer overflow in the formWirelessTbl function of the Edimax BR-6428NS router firmware version 1.10. The flaw is triggered by sending a specially crafted POST request with a manipulated vapurl parameter, leading to memory corruption. The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 4.0 base score of 8.7 indicating high severity. No official patch or remediation has been announced by Edimax, and the vendor has not responded to disclosure attempts. Exploit code is publicly available, increasing the risk of potential attacks despite no current reports of exploitation in the wild.

Successful exploitation of this buffer overflow could allow an attacker to execute arbitrary code remotely on the affected device, potentially leading to full compromise of the router. This could result in unauthorized control over network traffic, device configuration, or further pivoting into internal networks. The vulnerability does not require user interaction or privileges, increasing its risk. However, no active exploitation has been observed to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting remote access to the device management interface, disabling unnecessary services, or isolating the device in a segmented network until an official patch is available.