Threats tagged 'ghsa-vvf2-q989-ccq7'

A command injection vulnerability exists in the Edimax BR-6428nC router up to version 1.16. The flaw is located in the web interface component, specifically in the /goform/setWAN endpoint, where manipulation of the pppUserName or pptpUserName parameters can lead to remote command injection. Public exploit code is available, but the vendor has not responded or provided a patch.