This vulnerability exists in the Edimax EW-7438RPn device firmware version 1.31, specifically in the formSDHCP function located at /goform/formSDHCP. An attacker can remotely trigger a stack-based buffer overflow by manipulating the submit-url argument, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor was contacted but did not respond or provide a patch, and no official remediation is currently available.

Successful exploitation of this vulnerability can allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The impact affects confidentiality, integrity, and availability of the device. Given the lack of vendor response and patch, affected devices remain vulnerable to potential exploitation. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider disabling remote access to the affected function or isolating the device from untrusted networks until a patch or official mitigation is available.