This vulnerability affects Edimax BR-6675nD firmware version 1.12 in the formHwSet function of the /goform/formHwSet POST request handler. By manipulating the parameters regDomain, ABandregDomain, nic0Addr, nic1Addr, wlanAddr, or inicAddr, an attacker can perform command injection remotely. The vulnerability is publicly disclosed with an exploit available, but the vendor has not provided any response or patch. The CVSS 4.0 score of 5.3 reflects a medium severity with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected Edimax BR-6675nD device, potentially compromising device integrity and confidentiality. Since the device is a network router, this could lead to unauthorized control over network traffic or device settings. However, no known exploits in the wild have been reported yet.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Users should monitor for any future advisories from Edimax. Until a fix is released, consider isolating the affected device from untrusted networks or disabling remote management features if possible to reduce exposure.