This vulnerability affects Edimax EW-7438RPn firmware version 1.31. The issue is a stack-based buffer overflow in the formRadius function of the /goform/formRadius endpoint. An attacker can remotely manipulate the submit-url parameter to overflow the stack buffer, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor was contacted but has not issued any response or patch. No official remediation or temporary fix is currently available.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The vulnerability impacts confidentiality, integrity, and availability with high severity. Since the attack vector is network-based and requires no privileges or user interaction, the risk to exposed devices is significant. However, no known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface and monitoring for suspicious activity. Avoid exposing the device to untrusted networks until an official patch or workaround is available.