This vulnerability affects Edimax EW-7438RPn firmware version 1.31. The issue lies in the formLogout function located at /goform/formLogout, where improper handling of the submit-url argument leads to a stack-based buffer overflow. This flaw can be exploited remotely without user interaction or privileges, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not provided any official fix or response, and no patch links are available.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or disrupt the device's operation, impacting confidentiality, integrity, and availability. Given the high CVSS score and the nature of the overflow, the device could be fully compromised. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider mitigating exposure by restricting network access to the affected device, disabling remote management if possible, or replacing the device with a secure alternative until a patch is released.