This vulnerability involves a buffer overflow in the formUSBAccount function located at /goform/formUSBAccount in Edimax EW-7478APC firmware version 1.04. The flaw is triggered by manipulating the UserName or Password arguments in a POST request, allowing remote attackers to potentially execute arbitrary code or cause denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor response or patch is available as of the publication date.

Successful exploitation of this buffer overflow can lead to remote code execution or denial of service on the affected device. The vulnerability impacts confidentiality, integrity, and availability of the device. Because it can be triggered remotely without user interaction and requires low privileges, it poses a significant risk to network security where the device is deployed.

No official patch or remediation is currently available from the vendor. Users should consider restricting network access to the affected device, especially from untrusted networks, to reduce exposure. Monitor for any future vendor advisories or firmware updates addressing this issue. Since the vendor has not responded, alternative mitigations such as network segmentation or disabling vulnerable services may be necessary.