This vulnerability involves a buffer overflow in the Edimax BR-6478AC router firmware version 1.23. The issue occurs in the formiNICSiteSurvey function of the POST Request Handler when the selSSID argument is manipulated, allowing remote attackers to overflow a buffer. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction. The vendor has not issued a patch or advisory, and no official remediation level is provided.

Successful exploitation of this buffer overflow could allow remote attackers to cause denial of service or potentially execute arbitrary code on the affected device. The vulnerability is exploitable remotely without authentication or user interaction, increasing its risk. The public availability of exploit code raises the likelihood of attack attempts. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interfaces and monitoring for unusual activity. Avoid exposing the device directly to untrusted networks until a patch or official mitigation is available.