This vulnerability involves a buffer overflow in the Edimax BR-6675nD 1.12 firmware within the POST Request Handler component, specifically the formL2TPSetup function. An attacker can remotely send a crafted POST request manipulating the L2TPUserName parameter to trigger a buffer overflow condition. This may lead to potential compromise of the device due to memory corruption. The vulnerability is rated with a CVSS 4.0 score of 8.7 (high severity) indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued any patch or official remediation, and no cloud service is involved.

Successful exploitation of this vulnerability can lead to memory corruption on the affected device, potentially allowing an attacker to execute arbitrary code or cause denial of service. The vulnerability affects confidentiality, integrity, and availability of the device. Since the attack can be launched remotely without authentication or user interaction, the risk to exposed devices is significant. However, no confirmed exploits in the wild have been reported to date.

Patch status is not yet confirmed — no official fix or remediation has been provided by the vendor. Since the vendor has not responded or released a patch, users should consider mitigating exposure by restricting network access to the affected device, disabling the vulnerable service if possible, or replacing the device with a non-vulnerable alternative. Monitor vendor channels for any future advisories or patches.