This vulnerability affects Edimax EW-7438RPn firmware version 1.28a. The issue lies in the formwlencrypt24g function handling POST requests, specifically when processing the key1 parameter. Improper validation leads to a buffer overflow condition, which can be triggered remotely by an attacker. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not issued any fix or advisory, and no patch links are available. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation of this vulnerability allows a remote attacker to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. Given the high CVSS score and the availability of public exploit code, affected devices are at significant risk. The lack of vendor response or patch increases exposure for users of version 1.28a of the Edimax EW-7438RPn.

No official patch or remediation is currently available from the vendor. Users should consider discontinuing use of the affected firmware version 1.28a or isolate the device from untrusted networks to reduce exposure. Monitor for any future vendor advisories or firmware updates addressing this issue. Until a fix is released, avoid exposing the device to untrusted networks and restrict access to management interfaces.