The Edimax EW-7478APC device running firmware version 1.04 contains a buffer overflow vulnerability in the POST request handler function formUSBFolder. Specifically, improper handling of the ShareName and SelectName parameters allows an attacker to overflow a buffer remotely. This vulnerability has been publicly disclosed, and while no known exploits are currently observed in the wild, the exploit code is available. The vendor has not issued any response or patch to address this issue.

Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code remotely on the affected device, potentially leading to full compromise of the device. The vulnerability requires low attack complexity, no user interaction, and low privileges, increasing the risk of exploitation. The CVSS 4.0 base score is 8.7 (high severity), reflecting the significant impact on confidentiality, integrity, and availability.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded to the disclosure, users should consider mitigating exposure by disabling remote access to the affected POST handler if possible, or isolating the device from untrusted networks. Monitor vendor channels for any future updates or patches addressing this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.