The Edimax BR-6675nD router firmware version 1.12 contains a buffer overflow vulnerability in the POST request handler function formL2TPSetup, specifically when processing the L2TPUserName parameter. An attacker can remotely send a specially crafted POST request to trigger the overflow, potentially leading to code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued a patch or advisory, and the exploit code has been publicly disclosed.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of buffer overflows, the impact includes potential full compromise of the device's functionality and security. No known exploits in the wild have been reported yet, but public disclosure increases the risk of exploitation attempts.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Organizations using Edimax BR-6675nD version 1.12 should consider mitigating exposure by restricting network access to the device's management interfaces, especially from untrusted networks. Monitor for any updates or advisories from Edimax for official fixes. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.