This vulnerability affects Edimax BR-6675nD version 1.12. The stainfo function in the /goform/stainfo endpoint improperly handles the interface argument, enabling remote command injection. This allows an attacker with network access to the device to execute arbitrary commands with limited privileges. The vulnerability is remotely exploitable without user interaction. Although publicly disclosed, there is no known vendor patch or official remediation available at this time.

Successful exploitation could allow an attacker to execute arbitrary commands on the affected device remotely with limited privileges. This could lead to unauthorized control or disruption of the device's operation. However, the impact is limited by the low complexity of attack and limited privileges granted. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interfaces and monitoring for suspicious activity. No official fix or temporary workaround is currently available.