The vulnerability resides in the formWanTcpipSetup handler of the Edimax BR-6478AC firmware. Input validation of the pppUserName field allows an attacker to send a crafted value that overflows a stack buffer, potentially corrupting execution state. The wording in the description indicates that this can lead to arbitrary code execution or a denial‑of‑service condition by corrupting memory on the affected device. The weakness is classified as a buffer overflow (CWE-119) and a stack-based buffer overflow (CWE-121).

The affected product is the Edimax BR‑6478AC router, specifically firmware version 1.23. End users operating older firmware should verify the version and assess the risk of this vulnerability. No other vendors or product lines are listed.

The CVSS score of 8.7 classifies the flaw as high severity. EPSS data is unavailable, yet the public note that an exploit exists and can be executed remotely suggests a realistic threat. The vulnerability can be triggered from a remote host via the publicly exposed POST endpoint at /goform/formWanTcpipSetup, making it directly exploitable over the network. The device is not listed in the CISA KEV catalog, but given the public availability of the exploitation code, administrators should treat it as an immediate risk.