This vulnerability affects Edimax EW-7478APC version 1.04. It arises from improper handling of the pppUserName argument in the formWanTcpipSetup function, leading to a stack-based buffer overflow. The vulnerability allows remote attackers to potentially execute arbitrary code or cause a denial of service. Public exploit code has been released, increasing the risk of exploitation. The vendor was notified but has not issued any fix or advisory.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected devices. Given the critical CVSS score of 9.4 and the availability of public exploit code, affected devices are at high risk. No vendor remediation is currently available, leaving devices exposed to potential attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the affected device, disabling vulnerable services if possible, or replacing the device with a secure alternative until a patch is available.