This vulnerability affects Edimax EW-7438RPn devices running firmware versions up to 1.31. It involves a stack-based buffer overflow triggered by manipulating the webs argument in the /goform/mp component. The vulnerability allows remote attackers to execute code or cause denial of service due to the overflow. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not issued any patch or advisory, and no cloud service is involved.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected Edimax EW-7438RPn devices. The attacker requires only network access and low privileges, with no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability of the device. No known exploits are currently observed in the wild, but a public exploit exists.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should monitor vendor channels for updates. Until a fix is released, consider isolating affected devices from untrusted networks to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.