The Edimax BR-6675nD router firmware version 1.12 contains a buffer overflow vulnerability in the formsetPPPoE function of the POST request handler. Manipulating the pppUserName parameter can trigger this overflow, potentially allowing remote attackers to compromise the device. The vulnerability is remotely exploitable without authentication or user interaction. Despite early vendor notification, no fix or advisory has been issued. The CVSS 4.0 score is 8.7, reflecting high impact on confidentiality, integrity, and availability.

Successful exploitation of this buffer overflow could allow remote attackers to execute arbitrary code or cause denial of service on affected devices. The vulnerability affects confidentiality, integrity, and availability with high impact. No known active exploitation has been reported, but public exploit code exists, increasing the risk of attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, affected users should consider disabling remote management features or isolating the device from untrusted networks to reduce exposure until a patch or official mitigation is released.