This vulnerability affects Edimax BR-6675nD version 1.12 in the formsetPPPoE function of the POST Request Handler component. Manipulating the pppUserName argument can cause a buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not provided any remediation or official fix, and the exploit is publicly available.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or disrupt the device's normal operation, leading to denial of service. Given the high CVSS score and remote attack vector, affected devices are at significant risk if exposed to untrusted networks.

No official patch or remediation is currently available from the vendor. Users should consider mitigating exposure by restricting network access to the affected device, disabling PPPoE services if not needed, or replacing the device with a secure alternative. Monitor vendor channels for any future advisories or patches. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.