This vulnerability affects Edimax EW-7478APC version 1.04 specifically in the formWlSiteSurvey function of the /goform/formWlSiteSurvey endpoint. By manipulating the selSSID argument, an attacker can trigger a buffer overflow condition remotely. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with high impact on confidentiality, integrity, and availability. The vendor was contacted but did not respond, and no patch or remediation guidance is currently available. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation of this buffer overflow vulnerability can lead to remote code execution or denial of service on the affected device. Given the critical CVSS score and the ability to exploit remotely without privileges or user interaction, the impact on confidentiality, integrity, and availability is high. The presence of public exploit code increases the likelihood of attacks, although no active exploitation in the wild is currently reported.

No official patch or remediation is currently available from the vendor. Users should consider isolating affected devices from untrusted networks and monitor for unusual activity. Applying network-level protections such as firewall rules to restrict access to the vulnerable endpoint may reduce exposure. Check the vendor’s website or advisories regularly for updates or patches.