The Edimax BR-6428NS router version 1.10 contains a command injection vulnerability in the POST request handler for the /goform/formWlanM endpoint. Attackers can manipulate multiple parameters related to wireless settings (such as ateFunc, ateGain, ateTxCount, and others) to inject commands remotely. This flaw allows execution of arbitrary commands on the device with limited privileges, potentially compromising the device's integrity. The vulnerability is publicly disclosed with available exploit code, but the vendor has not issued a patch or provided remediation guidance. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to low impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router with limited privileges. This could lead to unauthorized control or disruption of the device's wireless functionality. The impact is rated medium severity with a CVSS score of 5.3. There are no reports of active exploitation in the wild. The lack of vendor response and patch increases the risk for affected users.

No official patch or remediation is currently available from the vendor. Users should monitor vendor communications for updates. Until a fix is released, affected devices should be isolated from untrusted networks to reduce exposure. Consider replacing the device with a more secure alternative if possible. Avoid exposing the management interface to the internet or untrusted networks. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.