This vulnerability affects Edimax EW-7438RPn version 1.31. It arises from improper handling of the submit-url parameter in the /goform/formrefresh endpoint, leading to a stack-based buffer overflow. The vulnerability can be exploited remotely without user interaction or privileges. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not issued a patch or advisory, and the exploit code is publicly available.

Successful exploitation can cause a stack-based buffer overflow, potentially allowing remote code execution or denial of service on the affected device. Given the network attack vector and no required privileges, attackers can exploit this remotely to compromise the device. The public availability of exploit code increases the risk of active exploitation.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fixes are published, users should consider mitigating exposure by restricting network access to the device, disabling vulnerable services if possible, or replacing the device with a secure alternative. Monitor vendor channels for any future updates or patches.