This vulnerability affects Edimax BR-6428NS firmware version 1.10. The POST request handler at /goform/formWlbasic processes the repeaterSSID parameter insecurely, allowing an attacker to inject arbitrary commands. The vulnerability is remotely exploitable without requiring user interaction or privileges beyond low-level access. The vendor was notified but has not provided a fix or mitigation guidance. No known exploits are reported in the wild as of the publication date.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially compromising the router's integrity and confidentiality. This could lead to unauthorized control over the device and network traffic manipulation. However, the CVSS score and vector indicate limited impact due to low complexity and low privileges required, and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider disabling remote management features if possible or isolating the device from untrusted networks to reduce exposure. Monitor for vendor updates or third-party patches addressing this vulnerability.