CVE-2026-8775
HighSummary
A flaw has been found in Edimax BR-6428NS version 1.10 affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName causes buffer overflow, allowing for remote attack initiation.
Risk Assessment
This vulnerability poses a significant risk to organizations as an attacker can remotely exploit it, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to immediately update the device to the latest firmware version to mitigate this vulnerability and to monitor the system for suspicious activity.
Other vulnerabilities in Edimax BR-6428NS 1.10
See all- CVE-2026-9297Medium
A command injection vulnerability was identified in Edimax BR-6428NS version 1.10 in the formWlbasic function of the /goform/formWlbasic file. An attacker can remotely manipulate the repeaterSSID argument, leading to arbitrary command execution. The exploit has been publicly disclosed and may be used.
- CVE-2026-9296Medium
A command injection vulnerability has been found in Edimax BR-6428NS version 1.10 in the system function of the /goform/formWlanM file. The attack can be launched remotely by manipulating multiple arguments.
- CVE-2026-9295High
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWirelessTbl function of /goform/formWirelessTbl. Manipulation of the vapurl argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
- CVE-2026-9294High
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWanTcpipSetup function of /goform/formWanTcpipSetup. Manipulation of the pppUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
Original NVD description (English source)
A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.