This vulnerability involves a stack-based buffer overflow in the Edimax EW-7438RPn 1.31 device, specifically in the formWlSiteSurvey function of the /goform/formWlSiteSurvey component. The flaw is caused by improper handling of the selSSID/submit-url argument, allowing an attacker to remotely trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not provided any response or patch, and the device is not a cloud service, so remediation must be managed by the user.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. No official patch or mitigation has been provided by the vendor, increasing the risk for users of the affected version 1.31.

No official fix or patch is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should consider disabling or restricting access to the vulnerable function if possible, or replacing the device with a non-vulnerable model. Monitor vendor channels for any future advisories or patches. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.