The flaw resides in the formWlSiteSurvey handler of the Edimax BR-6675nD 1.12 firmware, where manipulating the selSSID argument causes a stack-based buffer overflow. The vulnerability is exploitable via a crafted POST request and could allow an attacker to execute arbitrary code on the device, compromising confidentiality, integrity, and availability of the router’s management functions.

The affected product is the Edimax BR-6675nD wireless router. No specific firmware revisions beyond 1.12 are listed as insecure, and the CVE only references the 1.12 version. External references indicate that the device may expose the vulnerable endpoint to the wider network.

The CVSS score of 8.7 indicates high severity. The EPSS score is not available, but the vulnerability is publicly disclosed and may be used remotely. The vendor has not responded to the disclosure, and the weakness is not yet listed in CISA KEV, yet the potential for remote code execution means that diligent assessment and timely remediation is required.