This vulnerability involves a buffer overflow in the Edimax EW-7438RPn wireless extender firmware versions up to 1.31. Specifically, the issue is in the formWirelessTbl function of the /goform/formWirelessTbl component, where improper handling of the submit-url argument allows an attacker to overflow a buffer remotely. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not provided any advisory or patch, and the exploit code is publicly available.

Successful exploitation can lead to remote code execution or denial of service on affected Edimax EW-7438RPn devices, compromising device confidentiality, integrity, and availability. The vulnerability requires only low privileges and no user interaction, making it a significant risk for network security. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling remote management if possible, or isolating the device until an official patch or workaround is available.