This vulnerability affects the Edimax BR-6478AC router firmware version 1.23. The issue lies in the POST Request Handler component, specifically the formL2TPSetup function. An attacker can remotely send a crafted POST request with a manipulated L2TPUserName parameter to cause a buffer overflow. This could potentially lead to memory corruption and impact the device's stability or security. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The vendor has not issued any patch or advisory, and no known exploits are currently observed in the wild.

Successful exploitation of this vulnerability may allow a remote attacker to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. Given the high CVSS score and remote attack vector without user interaction, the impact on device confidentiality, integrity, and availability is high. However, no known active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider disabling the vulnerable service or restricting access to the device's management interface from untrusted networks as temporary mitigation. Monitor official Edimax channels for any forthcoming patches or updates.