This vulnerability affects Edimax EW-7438RPn firmware version 1.31. A stack-based buffer overflow occurs in the formStats function when the submit-url parameter is manipulated. The flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued any advisory or patch, and no official remediation is currently documented.

Successful exploitation can lead to remote code execution or denial of service on the affected device, compromising confidentiality, integrity, and availability. The vulnerability is remotely exploitable without authentication or user interaction, increasing the risk. However, no known exploits in the wild have been confirmed yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider mitigating exposure by restricting network access to the affected device, disabling vulnerable services if possible, or replacing the device with a secure alternative until an official patch is released.