This vulnerability involves a buffer overflow in the Edimax BR-6428NS router firmware version 1.10. The flaw exists in the formWirelessTbl function handling POST requests at /goform/formWirelessTbl. By sending a specially crafted vapurl parameter, an attacker can trigger a buffer overflow remotely. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high impact with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not provided any remediation or official fix, and the exploit code is publicly available.

Successful exploitation of this buffer overflow can lead to high-impact consequences such as remote code execution or denial of service on the affected device. Since the attack can be performed remotely without authentication or user interaction, it poses a significant risk to network security where this device is deployed. The public availability of exploit code increases the likelihood of attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling remote management if possible, or replacing the device with a secure alternative until a patch is available.