The Edimax EW-7478APC device running firmware version 1.04 contains a buffer overflow vulnerability in the formWlSiteSurvey function located in /goform/formWlSiteSurvey. An attacker can remotely manipulate the selSSID parameter to trigger a buffer overflow condition. This vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, availability, and security requirements with high impact. The vendor has not issued any patch or official remediation, and exploit code is publicly available.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the critical CVSS score and the remote attack vector, attackers can potentially take full control of the device or disrupt its operation. The vulnerability affects confidentiality, integrity, and availability of the device and its network environment.

No official patch or remediation is currently available from the vendor. Users should consider isolating the affected device from untrusted networks and monitor for suspicious activity. Due to the public availability of exploit code, caution is advised until a vendor fix is released. Check the vendor's website or security advisories regularly for updates.