The Edimax EW-7438RPn device running firmware version 1.31 contains a stack-based buffer overflow vulnerability in the formLicence function located at /goform/formLicence. The vulnerability is triggered by manipulating the submit-url argument, which leads to memory corruption on the stack. This flaw can be exploited remotely without authentication or user interaction, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. Despite early vendor notification, no patch or official remediation has been provided, and the exploit code is publicly available.

Successful exploitation of this vulnerability may allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the stack-based buffer overflow nature, the impact includes potential full compromise of the device. The vulnerability requires no user interaction and can be triggered remotely, increasing the risk. However, there is no current evidence of exploitation in the wild.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to disclosure attempts. Organizations using the affected firmware version 1.31 should consider mitigating exposure by restricting remote access to the device's management interface, applying network-level protections such as firewall rules to limit access to the vulnerable endpoint, or replacing the device if feasible. Monitor vendor channels for any future updates or patches addressing this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.