This vulnerability affects Edimax EW-7478APC version 1.04 in the formUSBFolder function of the POST request handler at /goform/formUSBFolder. Improper handling of the ShareName or SelectName parameters allows an attacker to cause a buffer overflow remotely. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The vendor was contacted but did not provide any response or patch. Exploit details have been publicly disclosed, but no known exploits in the wild have been reported.

Successful exploitation of this buffer overflow can lead to high-impact consequences such as potential remote code execution or denial of service on the affected device. The vulnerability is remotely exploitable with low complexity and does not require user interaction, increasing the risk of attack. However, no confirmed active exploitation has been reported to date.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Users should monitor vendor communications for any future updates. Until a fix is released, consider restricting network access to the affected device to trusted sources only and avoid exposing the device's management interface to untrusted networks.