This vulnerability involves a buffer overflow in the setWiFiMultipleConfig function of the wireless.so library used by code-projects for Plugin 4.1.2cu.5137. The overflow occurs when the wepkey2 argument is manipulated remotely, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impacts on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with exploit code available, but no vendor patch or official remediation has been documented.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to buffer overflow. The attacker can fully compromise the affected system's confidentiality, integrity, and availability without requiring user interaction or elevated privileges. The public availability of exploit code increases the risk of attacks, although no active exploitation has been confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the vulnerable service and monitoring for suspicious activity related to the wepkey2 parameter. Avoid exposing the affected endpoint to untrusted networks. Follow vendor channels closely for updates and apply patches promptly once available.