The CVE identifies a classic buffer overflow within the formPPPoESetup function of the Edimax BR‑6675nD router firmware 1.12. By sending an overly long value for the pppUserName field in a POST request to /goform/formPPPoESetup, an attacker can overflow the stack and potentially execute arbitrary code. The flaw relies on insufficient bounds checking (CWE‑119 and CWE‑120) and is reachable from outside the local network, making it a remote code execution risk.

This flaw affects the Edimax BR‑6675nD wireless router, specifically firmware version 1.12. The issue resides in the POST request handler exposed through the web management interface, which most users access via the device's IP address. No other firmware versions or related products are listed as affected.

The CVSS base score of 8.7 indicates a high severity. Although the EPSS score is unavailable, the exploit is publicly available and can be triggered from any reachable router, making the likelihood of exploitation significant. The vulnerability is not currently listed in the CISA KEV catalog, but corporate networks that own affected routers should treat potentially exposed devices as high risk and focus on immediate remediation.