CVE-2026-9401
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWanTcpipSetup function of the /goform/formWanTcpipSetup file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.
Risk Assessment
A remote attacker can exploit this vulnerability to execute arbitrary code or cause a device crash, potentially leading to device takeover and network compromise.
Recommendation
Immediately update the Edimax BR-6675nD firmware to the latest available version if a patch is provided by the vendor, or consider replacing the device with a supported model.
Other vulnerabilities in Edimax BR-6675nD
See all- CVE-2026-9439Medium
A vulnerability in Edimax BR-6675nD 1.12. The stainfo function in /goform/stainfo allows command injection via the interface argument. Remote attack, exploit public.
- CVE-2026-9423Medium
In the Edimax BR-6675nD router version 1.12, the mp function in the POST Request Handler component in file /goform/mp is vulnerable to command injection via the command argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-9403High
Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the POST Request Handler component. Manipulation of the selSSID argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-9402Medium
A command injection vulnerability has been found in Edimax BR-6675nD version 1.12 in the formWlanMP function of the /goform/formWlanMP file. The attack can be launched remotely by manipulating multiple arguments.
- CVE-2026-9400Medium
A command injection vulnerability has been found in Edimax BR-6675nD version 1.12 in the formUSBStorage function of the /goform/formUSBStorage file. The attack can be launched remotely by manipulating the sub_dir argument.
- CVE-2026-9399High
Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formsetPPPoE function of the /goform/formsetPPPoE file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-9382High
A buffer overflow vulnerability was found in Edimax BR-6675nD version 1.12 in the formPPTPSetup function of /goform/formPPTPSetup. Manipulation of the pptpUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
- CVE-2026-9381High
A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formPPPoESetup function of /goform/formPPPoESetup. The attack can be launched remotely and the exploit is public.
- CVE-2026-9380High
A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formL2TPSetup function of /goform/formL2TPSetup. The attack can be launched remotely and the exploit is public.
- CVE-2026-9379Medium
A command injection vulnerability has been found in Edimax BR-6675nD version 1.12 in the formWpsStart function of the /goform/formWpsStart file. The attack can be launched remotely by manipulating the pinCode argument.
Original NVD description (English source)
A vulnerability has been found in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.