This vulnerability affects Edimax BR-6478AC version 1.23 and involves a buffer overflow triggered by the manipulation of the selSSID argument in the /goform/formQoS POST request handler. The flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, no user interaction, and low privileges required. The vulnerability is publicly known and exploitable, but no official fix or patch has been documented in the vendor advisory or other sources.

Successful exploitation of this buffer overflow can lead to remote code execution or denial of service on the affected device. Given the network attack vector and low complexity, attackers can exploit this vulnerability remotely without user interaction, potentially compromising the router's integrity and availability. The public release of an exploit increases the risk of active attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting remote access to the management interface. Monitor vendor communications for updates on patches or official mitigations.