EUVD-2026-31649
GHSA-7c5g-6hjv-j6hp
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was determined in Edimax BR-6675nD 1.12. Affected is the function stainfo of the file /goform/stainfo. This manipulation of the argument interface causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Command injection in the Edimax BR-6675nD 1.12 router's web management interface allows a low-privileged remote attacker to execute arbitrary OS commands by submitting a crafted value for the interface parameter to the /goform/stainfo endpoint. A public proof-of-concept exploit is available on Notion and documented via VulDB, lowering the bar for exploitation. No vendor patch has been issued; the vendor did not respond to coordinated disclosure, leaving affected deployments without an official fix.
Technical ContextAI
The Edimax BR-6675nD is a consumer wireless router whose firmware exposes a web-based management interface. The vulnerable function stainfo, located at the CGI endpoint /goform/stainfo, accepts a user-supplied interface argument and passes it to a system-level command without adequate input sanitization. This is a classic CWE-77 (Improper Neutralization of Special Elements used in a Command - Command Injection) flaw, where attacker-controlled data reaches an OS command interpreter unescaped, enabling arbitrary command execution in the context of the web server process. The CPE identifier cpe:2.3:a:edimax:br-6675nd:*:*:*:*:*:*:*:* uses a wildcard version, indicating no other firmware versions have been explicitly cleared by NVD.
RemediationAI
No vendor-released patch has been identified at time of analysis; the vendor was notified prior to public disclosure but did not respond, and no fix version has been confirmed from any source. The primary compensating control is to restrict or disable access to the router's web management interface: block external WAN-side access to the HTTP/HTTPS management ports via perimeter firewall rules, and where possible enforce source-IP allowlisting so only trusted LAN hosts can reach the management interface - this removes the network-exploitable attack surface at the cost of requiring physical or LAN-local access for administration. Disabling the remote management feature in the router settings entirely is advisable if it is not operationally required. For environments where an unpatched command injection vulnerability is unacceptable, replacing the device with a supported model from a vendor with an active security response process should be evaluated. Track the VulDB entry at https://vuldb.com/vuln/365420 for any future vendor response or patch release.
Stack/heap buffer overflow in the Edimax BR-6675nD 1.12 wireless router allows authenticated remote attackers to corrupt
Buffer overflow in the Edimax BR-6675nD 1.12 wireless router's web management interface allows remote attackers with low
Stack buffer overflow in the Edimax BR-6675nD 1.12 wireless router allows remote authenticated attackers to corrupt memo
Stack buffer overflow in the Edimax BR-6675nD 1.12 router's PPTP setup handler allows remote authenticated attackers to
Buffer overflow in the Edimax BR-6675nD 1.12 wireless router allows remote attackers to corrupt memory by sending a mali
Stack/heap buffer overflow in Edimax BR-6675nD 1.12 routers allows authenticated remote attackers to corrupt memory via
Command injection in the Edimax BR-6675nD 1.12 router's WPS start handler allows remote attackers with low-privilege aut
Command injection in the Edimax BR-6675nD firmware 1.12 exposes the POST handler at /goform/formHwSet to OS-level comman
Command injection in Edimax BR-6675nD 1.12 router firmware allows authenticated remote attackers to execute arbitrary OS
Command injection in the Edimax BR-6675nD 1.12 router's web management interface allows remote authenticated attackers t
Command injection in Edimax BR-6675nD firmware 1.12 enables remote attackers with administrative credentials to execute
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today