Br 6428Nc
Monthly
Buffer overflow in Edimax BR-6428nC router firmware (version 1.16 and earlier) allows authenticated remote attackers to execute arbitrary code via crafted pptpDfGateway parameter in the /goform/setWAN endpoint. A public proof-of-concept exploit exists demonstrating stack overflow exploitation. EPSS data not available, but the combination of remote attack vector, low complexity, and published exploit code indicates elevated real-world risk for exposed devices with default credentials.
Stack-based buffer overflow in the Edimax BR-6428nC wireless router (firmware version 1.16) allows an authenticated remote attacker to corrupt memory by sending crafted interface1 or interface2 parameters to the /goform/formWizSurvey endpoint, potentially achieving code execution or causing a denial of service. Publicly available exploit code exists, and the severity signals conflict sharply: the CVE publisher assigned a CVSS 4.0 score of 2.1 (low), while our independent assessment rates it 8.8 (high) under CVSS 3.1 due to high confidentiality, integrity and availability impact. No confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Open redirect in the Edimax BR-6428nC router firmware (1.16) allows a remote, unauthenticated attacker to steer a victim's browser to an arbitrary external site by crafting a malicious submit-url value, because the websRedirect function in the goform handler fails to validate the redirect target (CWE-601); multiple endpoints in that handler are affected. Exploitation is not server-side - it requires a victim to click a crafted link and follow the redirect (CVSS v4 UI:P, PR:N), and impact is limited to phishing/social-engineering enablement (VI:L, no confidentiality or availability impact), matching the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. Publicly available exploit code exists (published proof-of-concept with a Notion write-up), and no CISA KEV listing or EPSS score was provided in the available intelligence; the vendor was contacted early but did not respond, so no vendor-released patch was identified at time of analysis.
Command injection in Edimax BR-6428nC router web interface through the /goform/setWAN endpoint allows authenticated remote attackers to execute arbitrary system commands via unsanitized pppUserName or pptpUserName parameters. Affected firmware versions up to 1.16 contain this vulnerability; publicly available exploit code exists. The vendor was contacted but did not respond, indicating no security fix is anticipated.
Buffer overflow in Edimax BR-6428nC router firmware (version 1.16 and earlier) allows authenticated remote attackers to execute arbitrary code via crafted pptpDfGateway parameter in the /goform/setWAN endpoint. A public proof-of-concept exploit exists demonstrating stack overflow exploitation. EPSS data not available, but the combination of remote attack vector, low complexity, and published exploit code indicates elevated real-world risk for exposed devices with default credentials.
Stack-based buffer overflow in the Edimax BR-6428nC wireless router (firmware version 1.16) allows an authenticated remote attacker to corrupt memory by sending crafted interface1 or interface2 parameters to the /goform/formWizSurvey endpoint, potentially achieving code execution or causing a denial of service. Publicly available exploit code exists, and the severity signals conflict sharply: the CVE publisher assigned a CVSS 4.0 score of 2.1 (low), while our independent assessment rates it 8.8 (high) under CVSS 3.1 due to high confidentiality, integrity and availability impact. No confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Open redirect in the Edimax BR-6428nC router firmware (1.16) allows a remote, unauthenticated attacker to steer a victim's browser to an arbitrary external site by crafting a malicious submit-url value, because the websRedirect function in the goform handler fails to validate the redirect target (CWE-601); multiple endpoints in that handler are affected. Exploitation is not server-side - it requires a victim to click a crafted link and follow the redirect (CVSS v4 UI:P, PR:N), and impact is limited to phishing/social-engineering enablement (VI:L, no confidentiality or availability impact), matching the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. Publicly available exploit code exists (published proof-of-concept with a Notion write-up), and no CISA KEV listing or EPSS score was provided in the available intelligence; the vendor was contacted early but did not respond, so no vendor-released patch was identified at time of analysis.
Command injection in Edimax BR-6428nC router web interface through the /goform/setWAN endpoint allows authenticated remote attackers to execute arbitrary system commands via unsanitized pppUserName or pptpUserName parameters. Affected firmware versions up to 1.16 contain this vulnerability; publicly available exploit code exists. The vendor was contacted but did not respond, indicating no security fix is anticipated.