The Edimax BR-6675nD version 1.12 contains a buffer overflow vulnerability in the POST request handler function formPPTPSetup, specifically when processing the pptpUserName parameter. This flaw allows remote attackers to trigger a buffer overflow condition, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The vendor has not issued any advisory or patch, and the exploit code is publicly available.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the network attack vector and lack of required privileges or user interaction, the risk to exposed devices is significant. However, no known exploits in the wild have been reported yet. The absence of vendor response or patch increases the exposure window for affected users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling PPTP setup functionality if possible, or replacing the device with a more secure alternative until an official fix is available.