Edimax BR-6428NS Buffer Overflow Vulnerability in PPTP Setup Handler

A buffer overflow vulnerability has been identified in the Edimax BR-6428NS router, specifically in version 1.10. The issue arises in the POST request handler's formPPTPSetup function, where manipulation of the pptpUserName argument can be exploited remotely. This vulnerability has been publicly disclosed, and the vendor has not responded to initial contact regarding the issue.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.