Edimax BR-6675nD POST Request formPPPoESetup buffer overflow_CVE-2026-9381

{
    "lastseen": "",
    "description": "A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2026-05-24T12:30:10.768Z",
    "modified": "2026-05-24T12:30:10.768Z",
    "type": "cve",
    "title": "Edimax BR-6675nD POST Request formPPPoESetup buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/365344\nhttps://vuldb.com/vuln/365344/cti\nhttps://vuldb.com/submit/811559\nhttps://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formPPPoESetup-34b53a41781f803faf50d4caf940d2dc?source=copy_link",
    "id": "CVE-2026-9381",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "Edimax BR-6675nD 1.12",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "BR-6675nD",
    "version": "1.12",
    "vendor": "Edimax",
    "ai_description": "Buffer overflow vulnerability in Edimax BR-6675nD via manipulation of the pppUserName argument in the formPPPoESetup function of the POST Request Handler",
    "ai_severity": "High",
    "ai_vendor": "Edimax",
    "ai_product": "BR-6675nD",
    "ai_version": "1.12",
    "ai_score": 8.7
}