This vulnerability exists in the Edimax BR-6675nD 1.12 router, specifically in the formWlanMP function handling POST requests. By manipulating one or more of the specified parameters (such as ateFunc, ateGain, ateRate, and others), an attacker can perform command injection remotely. The vulnerability allows execution of arbitrary commands on the device, potentially compromising the router. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to limited confidentiality, integrity, and availability impacts. No official remediation or patch has been provided by the vendor.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router, potentially leading to unauthorized control or disruption of the device. The impact is rated medium based on the CVSS score of 5.3, reflecting limited but significant risk. There are no confirmed reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider mitigating exposure by restricting network access to the device's management interface and monitoring for unusual activity. Replacement or upgrade to a different device may be considered if no fix is forthcoming.