This vulnerability affects Edimax EW-7438RPn firmware version 1.31. The issue lies in the formrefresh function within the /goform/formrefresh endpoint, where improper handling of the submit-url parameter leads to a stack-based buffer overflow. The vulnerability can be exploited remotely without user interaction or privileges. The CVSS 4.0 base score is 8.7, reflecting high impact on confidentiality, integrity, and availability. The vendor has not issued any advisory or patch, and the exploit code is publicly available, increasing risk.

Successful exploitation of this vulnerability may allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. The high CVSS score indicates significant impact on system confidentiality, integrity, and availability. Since the exploit is public, the risk of attacks is elevated despite no known exploits in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor vendor communications for updates. Until a fix is released, consider isolating affected devices from untrusted networks or disabling the vulnerable service if possible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.