This vulnerability affects Edimax EW-7438RPn firmware version 1.31. A stack-based buffer overflow occurs in the formConnectionSetting function when the max_Conn/timeOut argument is manipulated. The flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued a fix or advisory, and no patch links are available.

Successful exploitation can lead to remote code execution or denial of service on affected devices, compromising confidentiality, integrity, and availability. The vulnerability is exploitable remotely without authentication or user interaction, increasing risk. Public exploit code availability raises the likelihood of attacks. The vendor has not provided any official fix or mitigation, leaving devices vulnerable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider disabling remote access to the affected function or device, isolate the device from untrusted networks, and monitor for unusual activity. Applying network-level protections such as firewall rules to restrict access to the device's management interface may reduce exposure until an official fix is available.