This vulnerability affects Edimax EW-7438RPn firmware version 1.31. The issue is a stack-based buffer overflow triggered by manipulating the submit-url parameter in the formWpsProxyEnable function. Exploitation can be performed remotely, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity. The vendor has not issued any advisory or patch, and no remediation level is specified. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation of this vulnerability may allow remote attackers to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on affected devices running Edimax EW-7438RPn version 1.31. Given the remote attack vector and high CVSS score, impacted devices are at significant risk if exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider disabling the vulnerable functionality if possible or isolate the device from untrusted networks until a patch or official mitigation is available. Monitor vendor channels for updates.