Description
A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument sub_dir can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-24
Score: 5.3 Medium
EPSS: 1.4% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Edimax BR-6675nD router runs firmware 1.12 and contains a flaw in its web interface. The formUSBStorage endpoint accepts a sub_dir parameter via POST request, and the value of this parameter is not properly sanitized. An attacker can inject arbitrary shell commands by manipulating sub_dir, which the router executes with system privileges. The result is command execution on the device, potentially granting full control to the attacker. This is a classic command injection weakness (CWE-77 and CWE-74).

Affected Systems

Affected devices are Edimax BR-6675nD routers with firmware 1.12. No other firmware versions are listed as vulnerable, so users should verify that their product matches this version. The issue was discovered in the POST request handler and is documented by various community sources.

Risk and Exploitability

The vulnerability carries a CVSS score of 5.3, indicating moderate risk. No EPSS score is available, however the exploit has been published and is known to be usable remotely. The vendor has replied but did not provide a fix, and the flaw is not included in the KEV catalog. Attackers can reach the device over the network, submit a crafted POST request to /goform/formUSBStorage, and successfully inject commands.

Generated by OpenCVE AI on May 24, 2026 at 23:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply any vendor‑released firmware that eliminates the command injection flaw in formUSBStorage.
  • Restrict remote management by placing the router in a segmented network or blocking external access to its web interface.
  • Block the /goform/formUSBStorage endpoint on the device or local firewall so that only trusted internal hosts can reach it.

Generated by OpenCVE AI on May 24, 2026 at 23:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 27 May 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 24 May 2026 22:30:00 +0000

Type Values Removed Values Added
Description A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument sub_dir can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title Edimax BR-6675nD POST Request formUSBStorage command injection
First Time appeared Edimax
Edimax br-6675nd
Weaknesses CWE-74
CWE-77
CPEs cpe:2.3:a:edimax:br-6675nd:*:*:*:*:*:*:*:*
Vendors & Products Edimax
Edimax br-6675nd
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Edimax Br-6675nd
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-05-27T19:37:48.433Z

Reserved: 2026-05-24T06:24:12.756Z

Link: CVE-2026-9400

cve-icon Vulnrichment

Updated: 2026-05-27T19:37:43.408Z

cve-icon NVD

Status : Deferred

Published: 2026-05-24T23:16:57.890

Modified: 2026-05-26T19:37:00.120

Link: CVE-2026-9400

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-24T23:30:11Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')