The Edimax EW-7438RPn device running firmware version 1.31 contains a stack-based buffer overflow vulnerability in the formWlanMP function. This vulnerability is triggered by manipulating various input parameters (ateFunc, ateGain, ateTxCount, ateChan, ateRate, ateMacID, e2pTxPower1-7, e2pTx2Power1-7, ateTxFreqOffset, ateMode, ateBW, ateAntenna, e2pTxFreqOffset, e2pTxPwDeltaB/G/Mix/N, readE2P) sent to the /goform/formWlanMP endpoint. Exploitation can be performed remotely without authentication, potentially leading to arbitrary code execution. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The vendor has not provided any patch or official remediation guidance, and the vulnerability details have been publicly disclosed.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected device without user interaction or privileges. This may lead to device compromise, unauthorized control, or disruption of network services. The high CVSS score reflects the critical nature of the buffer overflow and its potential impact on device security.

No official patch or remediation has been provided by the vendor as of the current information. Users should monitor the vendor's communications for any forthcoming updates or patches. Until a fix is available, consider restricting access to the vulnerable device's management interface from untrusted networks to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.