Description
A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edimax | EW-7438RPn | 1.31 | — |
References
- VDB-365461 | Edimax EW-7438RPn formrefresh stack-based overflow vdb-entry technical-description
- VDB-365461 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #813902 | Edimax EW-7438RPn 1.31 Stack-based Buffer Overflow third-party-advisory
- https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_18/18.md exploit