The Edimax BR-6478AC V2 router firmware version 1.23 contains a buffer overflow vulnerability in the formWlSiteSurvey function of the POST request handler. Specifically, the selSSID argument is improperly handled, allowing an attacker to overflow a buffer remotely. This vulnerability can be exploited without user interaction and has been publicly disclosed. The vendor was contacted but did not provide any response or patch information. No official remediation or patch is currently known.

Successful exploitation of this buffer overflow could allow a remote attacker to cause a denial of service or potentially execute arbitrary code on the affected device. Given the high CVSS score of 8.7 and the vector indicating network attack with no privileges or user interaction required, the impact is significant. However, there are no confirmed exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should monitor official Edimax channels for updates. Until a fix is released, consider limiting network exposure of the affected device and applying network-level protections to restrict access to the management interface.