The Edimax EW-7438RPn device firmware versions 1.0 through 1.31 contain a stack-based buffer overflow vulnerability in the /goform/mp endpoint of the webs component. An attacker can remotely manipulate the webs argument to overflow the stack, potentially leading to code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor was notified but has not issued any fix or advisory, and no official remediation is currently available.

Successful exploitation of this vulnerability can result in remote code execution or denial of service on affected Edimax EW-7438RPn devices. The attack requires no user interaction and can be performed remotely with low complexity and privileges. The vulnerability impacts confidentiality, integrity, and availability of the device. Although an exploit is publicly available, there are no confirmed reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the affected device, disabling vulnerable services if possible, or replacing the device with a secure alternative. Monitor official Edimax channels for any future security updates or patches.