This vulnerability affects Edimax EW-7438RPn devices running firmware versions up to 1.31. It arises from improper handling of the submit-url parameter in the formWirelessTbl function of the /goform/formWirelessTbl web component, leading to a buffer overflow condition. The flaw can be exploited remotely without user interaction and requires low attack complexity. The vulnerability has been publicly disclosed with an available exploit, but the vendor has not issued any official fix or advisory. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to a buffer overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service on the affected device. The high CVSS score reflects significant risk to confidentiality, integrity, and availability. Since the vulnerability can be exploited remotely without user interaction, affected devices are at elevated risk if exposed to untrusted networks. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should limit network exposure of affected devices, especially from untrusted networks, until an official patch or mitigation is available. Monitoring for vendor updates and applying patches promptly once released is recommended.