The Edimax BR-6478AC router firmware version 1.23 contains a buffer overflow vulnerability in the POST request handler component, specifically in the formUSBFolder function. By manipulating the ShareName or SelectName arguments in the /goform/formUSBFolder endpoint, an attacker can cause a buffer overflow condition. The vulnerability is remotely exploitable without authentication or user interaction. The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Exploit code has been publicly disclosed, increasing the risk of exploitation. No official patch or vendor remediation level is currently documented.

Successful exploitation of this buffer overflow vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the remote network attack vector and the availability of public exploit code, affected devices are at significant risk. The vulnerability affects only firmware version 1.23 of the Edimax BR-6478AC router. There is no indication that exploitation requires authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling remote access to the affected endpoint or isolating the device from untrusted networks to reduce exposure. Monitor vendor communications for updates on patches or official mitigations.