This vulnerability exists in Edimax EW-7478APC firmware version 1.04. The flaw is in the formWlbasic function of the /goform/formWlbasic endpoint, where the rootAPmac parameter is improperly handled, enabling an attacker to inject arbitrary commands remotely. The vulnerability has been publicly disclosed, but no official remediation or patch has been provided by the vendor. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially compromising the device's integrity and confidentiality. This could lead to unauthorized control over the device or network disruptions. However, there are no known exploits in the wild at this time.

No official fix or patch is currently available from the vendor. Users should monitor vendor communications for updates. Until a patch is released, consider limiting network exposure of the affected device and applying network-level protections to restrict access to the vulnerable endpoint.