CVE-2026-9380: Edimax BR-6675nD POST Request formL2TPSetup buffer overflow
A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable L2TP functionality (or any L2TP server/client feature) on the device to prevent use of the vulnerable formL2TPSetup endpoint.
Edimax BR-6675nD 1.12 (L2TP / web POST handler) L2TP = disabled - Configuration
Disable remote web administration or restrict administration access to trusted management IPs/networks to prevent remote attackers from reaching /goform/formL2TPSetup.
Edimax BR-6675nD 1.12 (web administration) remote_management = disabled or restricted - Compensating control
At the network perimeter or with a WAF/IDS/IPS, block or filter POST requests to the /goform/formL2TPSetup path and restrict access to the router's management ports to trusted IPs/networks.
- Operational
Isolate affected devices (Edimax BR-6675nD 1.12) from untrusted networks or the Internet until an official vendor patch is available; monitor device logs for suspicious POST requests targeting formL2TPSetup and other unusual activity.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9380?
CVE-2026-9380 has a high severity rating of 8.8.
How do I fix CVE-2026-9380?
To fix CVE-2026-9380, update the Edimax BR-6675nD firmware to the latest version provided by the manufacturer.
What type of vulnerability is CVE-2026-9380?
CVE-2026-9380 is a buffer overflow vulnerability affecting the function formL2TPSetup.
Can CVE-2026-9380 be exploited remotely?
Yes, CVE-2026-9380 can be exploited remotely through the affected POST Request Handler.
What impact does CVE-2026-9380 have on data security?
CVE-2026-9380 can lead to unauthorized access and possible data compromise due to buffer overflow.