This vulnerability in Edimax BR-6428NS version 1.10 allows an attacker to perform command injection via the POST request handler at /goform/formWlanM by manipulating specific parameters such as ateFunc, ateGain, ateTxCount, and others related to wireless configuration. The flaw enables remote attackers to execute arbitrary commands on the device. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to low impact on confidentiality, integrity, and availability. The vendor has not issued a patch or provided remediation guidance, and the exploit code is publicly available.

Successful exploitation could allow remote attackers to execute arbitrary commands on the affected device, potentially compromising the device's integrity and availability. The impact is rated medium based on the CVSS score of 5.3. There are no confirmed reports of exploitation in the wild, but the availability of public exploit code increases the risk.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fix is provided, users should consider mitigating exposure by restricting network access to the affected device, disabling remote management features if possible, or replacing the device with a more secure alternative. Monitor vendor channels for any future updates or patches. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.