This vulnerability affects Edimax EW-7438RPn version 1.31 and involves a stack-based buffer overflow in the formLicence function located in the /goform/formLicence endpoint. The issue arises from improper handling of the submit-url argument, allowing an attacker to remotely cause a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not issued a patch or advisory, and the exploit has been publicly disclosed.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of the buffer overflow, the impact includes potential full compromise of the device. However, there are no confirmed reports of exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor for vendor advisories for any future updates. Until a fix is released, affected devices should be isolated from untrusted networks or have access to the vulnerable endpoint restricted if possible. Network-level protections such as firewall rules blocking access to the /goform/formLicence endpoint may reduce exposure.