This vulnerability affects the Edimax BR-6478AC router firmware version 1.23. The issue is a buffer overflow in the formQoS function within the POST request handler at /goform/formQoS. Specifically, the selSSID parameter can be manipulated to overflow a buffer, potentially allowing remote code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The exploit code has been publicly released, increasing the risk of exploitation. No official patch or remediation level has been published by the vendor as of the data provided.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, which may lead to arbitrary code execution or denial of service on the affected device. The vulnerability is exploitable remotely over the network without user interaction and requires low privileges, making it a significant risk to affected devices running firmware version 1.23.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Edimax communications for updates. Until a patch is available, consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks.