This vulnerability affects Edimax EW-7438RPn devices running firmware versions up to 1.31. The issue resides in the formWizSurvey function of the /goform/formWizSurvey endpoint, where improper input validation of the ip, mask, and gateway parameters allows an attacker to inject OS commands. The vulnerability can be exploited remotely without authentication or user interaction. The vendor was notified but has not issued any fix or advisory. No official patch or remediation guidance is currently available.

Successful exploitation allows an attacker to execute arbitrary OS commands on the affected device remotely. This can lead to unauthorized control over the device, potentially compromising network security or device functionality. The medium CVSS score reflects the moderate complexity and impact of the vulnerability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the affected device's management interface and monitoring for suspicious activity. Avoid exposing the device to untrusted networks until a patch or official mitigation is available.