A buffer overflow exists in the formPPTPSetup function of the POST Request Handler on the Edimax BR‑6675nD router. The overflow is triggered when a long pptpUserName value is sent in the /goform/formPPTPSetup endpoint, allowing an attacker to overwrite memory and potentially execute arbitrary code. The flaw is identified as CWE‑119 (buffer overflow). The vendor supplied no patch in the information, and the exploit is publicly available.

The vulnerability affects the Edimax BR‑6675nD router running firmware version 1.12. Users of this model should verify the firmware version and apply updates when available.

The CVSS score of 8.7 indicates a high severity condition. Although a precise EPSS value is not provided, the presence of a published exploit and the remote nature of the attack vector increase the risk assessment. The flaw is not listed in CISA’s KEV catalog, but the active exploitation potential warrants immediate remedial action through vendor updates or other mitigations. The most probable attack path involves an unauthenticated external attacker sending a crafted HTTP POST request to /goform/formPPTPSetup with an excessively long pptpUserName field to trigger the overflow.