This vulnerability affects the Edimax BR-6478AC router firmware version 1.23. The issue is a buffer overflow in the POST request handler function formUSBFolder, triggered by crafted input in the ShareName or SelectName arguments. The vulnerability allows remote attackers to cause memory corruption, potentially leading to denial of service or arbitrary code execution. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device, compromising the confidentiality, integrity, and availability of the router. Given the high CVSS score and remote attack vector, this poses a significant risk to network security where the device is deployed. No known exploits are reported in the wild yet, but a public exploit exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the device's management interface and monitor for unusual activity. Avoid exposing the device to untrusted networks. Follow vendor channels closely for any updates or patches.