The Edimax BR-6478AC router firmware version 1.23 contains a buffer overflow vulnerability in the formiNICSiteSurvey function within the POST request handler. An attacker can remotely exploit this by sending a crafted POST request manipulating the selSSID parameter, leading to a buffer overflow condition. This vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has been contacted but has not issued any advisory or patch. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow on the affected device, potentially leading to denial of service or arbitrary code execution. Given the high CVSS score and public exploit availability, impacted devices are at significant risk. However, no confirmed reports of exploitation in the wild are documented at this time.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded or issued a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling remote management if possible, or replacing the device with a secure alternative. Monitor vendor channels for any future updates or patches. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.