PT-2026-42940 · Edimax · Br-6675Nd

Yhryhryhr_Tu · Published 2026-05-24 · Updated 2026-05-24 · CVE-2026-9380

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-9380

Affected Products

Br-6675Nd

References · 4

• 🔥 https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formL2TPSetup-34b53a41781f805abdfbdcbe930ad70a?source=copy_link · Exploit
• https://vuldb.com/submit/811558 · Note
• https://vuldb.com/vuln/365343 · Note
• https://vuldb.com/vuln/365343/cti · Note