CVE-2026-9443
HighSummary
A vulnerability has been detected in Edimax BR-6478AC version 1.23, affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName leads to buffer overflow.
Risk Assessment
The attack may be initiated remotely, posing a serious threat to the security of the device and the network it operates in.
Recommendation
It is recommended to update the device to the latest firmware version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Original NVD description (English source)
A security vulnerability has been detected in Edimax BR-6478AC 1.23. This vulnerability affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. The manipulation of the argument L2TPUserName leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.