The Edimax EW-7438RPn device running firmware version 1.31 contains a stack-based buffer overflow vulnerability in the formHwSet function located at /goform/formHwSet. This vulnerability arises from improper handling of multiple input arguments (Anntena, Mcs, regDomain, nic0Addr, nic1Addr, wlanAddr, wanAddr, wlanSSID, wlanChan, initgain, txcck, txofdm, submit-url) that can be manipulated remotely to overflow the stack buffer. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The exploit is publicly available, but no vendor fix or advisory has been issued to date.

Successful exploitation of this vulnerability allows a remote attacker to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The vulnerability impacts confidentiality, integrity, and availability of the device. Given the remote attack vector and no required privileges or user interaction, the risk to exposed devices is significant. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interfaces, disabling remote management if possible, or replacing the device with a secure alternative. Monitor official Edimax channels for any forthcoming patches or advisories.