Edimax BR-6428nC Command Injection Vulnerability in Web Interface WAN Settings

A command injection vulnerability has been identified in the Edimax BR-6428nC router, affecting versions prior to 1.16. The issue arises in the web interface, specifically within an unknown function of the file '/goform/setWAN'. The vulnerability is triggered by manipulating the 'pppUserName' or 'pptpUserName' arguments, allowing remote attackers to execute arbitrary commands. This exploit has been publicly disclosed and could be used for malicious attacks.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the affected device.