CVE-2026-9382: Edimax BR-6675nD POST Request formPPTPSetup buffer overflow
A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Executing a manipulation of the argument pptpUserName can lead to buffer overflow. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax BR-6675nD PPTP servicefrom your environment.If possible, uninstall or otherwise remove PPTP-related services/components from the device. If removal is not supported, keep the PPTP functionality disabled or replace the device if PPTP cannot be removed and the device must remain on the network.
- Configuration
Disable PPTP functionality or any PPTP-related configuration interface in the device web UI to prevent access to /goform/formPPTPSetup (the vulnerable formPPTPSetup handler).
Edimax BR-6675nD POST Request Handler (PPTP setup) PPTP server / PPTP setup handling = disabled - Configuration
Disable remote web administration or restrict management access to a small set of trusted IP addresses; remove WAN-side/Internet-facing management access to prevent remote exploitation.
Edimax BR-6675nD web management interface remote management/administration access = disabled or restricted to trusted IPs - Compensating control
Block or inspect HTTP POST requests to /goform/formPPTPSetup at the network perimeter (WAF, reverse proxy, or firewall). Block access to the device management interface from untrusted networks.
- Operational
Isolate affected devices from untrusted networks and monitor device logs for signs of exploitation (noting that an exploit has been published). Rotate credentials and recover/replace devices if compromise is suspected. Apply any vendor-supplied patches or updates as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9382?
The severity of CVE-2026-9382 is high with a score of 8.8.
How do I fix CVE-2026-9382?
To fix CVE-2026-9382, update the Edimax BR-6675nD firmware to the latest version provided by the manufacturer.
What impact does CVE-2026-9382 have on my device?
CVE-2026-9382 may lead to a remote buffer overflow, potentially allowing unauthorized access and control over the device.
Is CVE-2026-9382 remotely exploitable?
Yes, CVE-2026-9382 can be exploited remotely due to the nature of the vulnerability in the POST request handler.
Which component is affected by CVE-2026-9382?
CVE-2026-9382 affects the function formPPTPSetup in the POST Request Handler of the Edimax BR-6675nD.