A remote attacker can exploit a buffer overflow in the formWlanMP handler of Edimax BR-6208AC firmware 1.32 by manipulating the ateBW argument. The overflow can overwrite adjacent memory, potentially leading to arbitrary code execution or system compromise. The vulnerability is documented as a classic out‑of‑bounds write vulnerability consistent with CWEs 119 and 120. Because the flaw is triggered remotely, an adversary does not require local access to the device, and the exploit has been disclosed publicly.

The vulnerability affects the Edimax BR-6208AC router running firmware version 1.32. No other vendors or product versions are listed as impacted. Devices that have received only the 1.32 build remain unfortunate targets.

The CVSS score of 9.4 indicates a high risk with full exploitation potential. The EPSS score is not available, but the public disclosure and vendor silence suggest that exploitation scripts may already exist. The vulnerability is not currently listed in CISA’s KEV catalog, but the lack of a patch and the severity demand urgent attention. Attacks are likely to occur over the open web interfaces, with the entry point exposed through the /goform/formWlanMP endpoint.