The EFM ipTIME A8004T router firmware version 14.18.2 contains a stack-based buffer overflow vulnerability in the formWifiBasicSet function located in /goform/WifiBasicSet. This vulnerability arises from improper handling of the security_5g parameter, allowing remote attackers to trigger a buffer overflow condition. The vulnerability is remotely exploitable without authentication or user interaction, leading to potentially high impact on confidentiality, integrity, and availability. The vendor has not issued a patch or provided remediation information as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score (8.7) and the nature of the buffer overflow, the impact includes potential full compromise of the router's firmware and network traffic interception or disruption. No known exploits have been observed in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider disabling remote management features if possible and restrict network exposure of the affected device until a patch is released. Monitor vendor channels for updates and apply official patches promptly once available.