This vulnerability exists in Edimax BR-6478AC V2 firmware version 1.23 within the formWlSiteSurvey function of the POST Request Handler. Specifically, the selSSID argument is improperly handled, leading to a buffer overflow condition. This flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The vulnerability has been publicly disclosed, but the vendor has not issued any fix or advisory. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation of this buffer overflow vulnerability may allow remote attackers to execute arbitrary code or cause a denial of service on the affected device. Given the network attack vector and lack of required privileges or user interaction, the risk of remote compromise is significant. The absence of a vendor response or patch increases exposure for users of version 1.23 of the Edimax BR-6478AC V2.

No official patch or remediation is currently available from the vendor. Users should consider disabling remote access to the affected functionality if possible or isolate the device from untrusted networks to reduce exposure. Monitor vendor channels for any future advisories or updates addressing this vulnerability.