This vulnerability exists in the Edimax EW-7438RPn device firmware versions up to 1.31 within the formWizSurvey function of the /goform/formWizSurvey component. By manipulating the input parameters ssid, manualssid, ip, mask, or gateway, an attacker can cause a buffer overflow condition. The vulnerability is remotely exploitable with low attack complexity and no user interaction required, potentially allowing high impact on confidentiality, integrity, and availability. The vendor has not provided any advisory or patch, and the exploit code is publicly available.

Successful exploitation can lead to a buffer overflow, which may allow an attacker to execute arbitrary code or cause denial of service on the affected device. The vulnerability affects all firmware versions up to 1.31. Given the CVSS 4.0 score of 8.7 (high severity), the impact on confidentiality, integrity, and availability is high. No known exploits in the wild have been reported yet, but public exploit code exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official Edimax channels for updates. Until a patch is available, consider restricting remote access to the device management interface to trusted networks only and applying network-level protections to limit exposure.