This vulnerability affects Edimax EW-7478APC firmware version 1.04. The issue is a stack-based buffer overflow in the formPPPoESetup function of the POST Request Handler component, triggered by crafted input in the pppUserName parameter. The flaw allows remote attackers to cause memory corruption, potentially leading to code execution or denial of service. The vendor has not provided a fix or official response, and the exploit code is publicly available.

Successful exploitation can lead to a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code or cause a denial of service on the affected device. Given the remote attack vector and lack of authentication required, this vulnerability poses a significant risk to affected devices running version 1.04.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider disabling remote access to the affected function or isolate the device from untrusted networks until a patch is available.