Edimax BR-6675nD Command Injection Vulnerability in POST Request Handler

A command injection vulnerability has been identified in the Edimax BR-6675nD router, specifically in version 1.12. The issue arises in the POST request handler, within the 'formHwSet' function. The vulnerability can be exploited remotely by manipulating the 'regDomain', 'ABandregDomain', 'nic0Addr', 'nic1Addr', 'wlanAddr', or 'inicAddr' arguments. This flaw allows for unauthorized command execution on the device.

Impact

Exploitation of this vulnerability allows for command injection, enabling an attacker to execute arbitrary commands on the affected device.