This vulnerability involves a buffer overflow in the setWiFiMultipleConfig function of the wireless.so library used by code-projects for Plugin 4.1.2cu.5137. The flaw is due to improper handling of the wepkey2 argument, which can be manipulated remotely to overflow a buffer. The affected component is part of the CGI binary cstecgi.cgi. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Although exploit code is publicly available, there is no vendor-provided patch or official remediation information at this time.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to buffer overflow in a network-facing component. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of the affected system. Since the attack requires no privileges or user interaction and can be launched remotely, affected systems are at elevated risk until mitigated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of the affected service and applying any available workarounds recommended by the vendor. Monitor for updates from the vendor or security advisories for a patch or temporary mitigation.