The Edimax EW-7478APC wireless access point version 1.04 contains a buffer overflow vulnerability in the formiNICSiteSurvey function within the POST request handler. Manipulating the selSSID argument in the /goform/formiNICSiteSurvey endpoint triggers the overflow, allowing remote attackers to potentially execute arbitrary code or cause denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. Although an exploit has been published, there is no vendor response or official fix at this time.

Successful exploitation of this buffer overflow can lead to remote code execution or denial of service on the affected device. The vulnerability requires no user interaction and can be triggered remotely, increasing the risk of compromise. The high CVSS score reflects the ease of exploitation and potential impact on confidentiality, integrity, and availability of the device.

No official patch or remediation is currently available from the vendor. Users should consider isolating the affected device from untrusted networks and monitor for any suspicious activity. Since the vendor has not responded, alternative mitigations such as disabling vulnerable services or replacing the device with a secure model should be considered until a fix is released. Check vendor advisories regularly for updates.