This vulnerability affects Edimax BR-6675nD firmware version 1.12. The issue resides in the POST Request Handler component, specifically the formWanTcpipSetup function. An attacker can remotely trigger a buffer overflow by sending crafted data in the pppUserName parameter. The vendor was notified but did not respond, and no official remediation or patch is currently available. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with high severity.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The vulnerability affects the confidentiality, integrity, and availability of the device. There are no confirmed exploits in the wild yet, but public disclosure increases the risk of exploitation attempts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider mitigating exposure by restricting remote access to the device's management interface, disabling WAN-side management if possible, or replacing the device with a secure alternative until a fix is provided.