The Edimax EW-7438RPn device running firmware version 1.31 contains a stack-based buffer overflow vulnerability in the formRadius function located in /goform/formRadius. An attacker can remotely exploit this by manipulating the submit-url argument, causing a buffer overflow on the stack. This vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. The vulnerability is publicly disclosed, but the vendor has not provided any response or patch.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to the stack-based buffer overflow. The attacker can potentially compromise the device's confidentiality, integrity, and availability. Given the high CVSS score and remote exploitability without user interaction, affected devices are at significant risk if exposed to untrusted networks.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Users should consider mitigating exposure by restricting network access to the affected device, disabling remote management interfaces if possible, or replacing the device with a secure alternative. Monitor vendor channels for any future updates or patches addressing this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.