Wxhwxhwxh_Mie

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A stack-based buffer overflow exists in the POST Request Handler component. The issue occurs within the `formL2TPSetup()` function located in the `/goform/formL2TPSetup` endpoint when the `L2TPUserName` argument is manipulated. This flaw allows a remote attacker to trigger the overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formL2TPSetup` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow occurs in the POST Request Handler component when processing the `selSSID` argument. This issue is located within the `formiNICSiteSurvey()` function of the '/goform/formiNICSiteSurvey' endpoint and can be triggered remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow occurs in the POST Request Handler component when processing the `formQoS()` function within the '/goform/formQoS' endpoint. This issue is triggered by the manipulation of the `selSSID` argument, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the `submit-url` argument within the `formAccept()` function of the '/goform/formAccept' endpoint. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** Remote OS command injection is possible via the POST Request Handler component. The issue exists in the `formiNICbasic()` function within the `/goform/formiNICbasic` file. An attacker can remotely execute arbitrary operating system commands by manipulating the `rootAPmac` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formiNICbasic` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the `rootAPmac` argument within the `formStaDrvSetup()` function of the `/goform/formStaDrvSetup` endpoint. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBAccount()` function located in the `/goform/formUSBAccount` endpoint. A remote attacker can trigger this flaw by manipulating the `UserName` and `Password` variables. A buffer overflow is a condition where a program writes more data to a block of memory, or buffer, than it is allowed to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Isolate affected devices immediately.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A remote buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBFolder()` function located in the `/goform/formUSBFolder` endpoint when processing the `ShareName` or `SelectName` arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A stack-based buffer overflow exists in the POST Request Handler component. This issue occurs when the `formPPPoESetup()` function in the `/goform/formPPPoESetup` endpoint fails to properly handle the `pppUserName` argument. A remote attacker can exploit this by manipulating the `pppUserName` variable to cause a memory corruption. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formPPPoESetup` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V2 version 1.23 **Description** Command injection can be launched remotely via the POST Request Handler component. The issue exists within the `wiz 5in1 redirect()` function located in the '/goform/wiz 5in1 redirect' endpoint. Manipulation of the `newpass` variable allows for the execution of arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V2 version 1.23 **Description** A security flaw in the POST Request Handler component allows for remote command injection. This occurs through the manipulation of the `command` argument within the `mp()` function of the '/goform/mp' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/mp' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBAccount()` function of the `/goform/formUSBAccount` endpoint when manipulating the `UserName` and `Password` arguments, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow exists in the POST Request Handler component within the `formUSBFolder()` function of the `/goform/formUSBFolder` endpoint. The issue is caused by improper handling and lack of bounds checking of the `ShareName` and `SelectName` arguments. A remote attacker can send a long string as input to overwrite adjacent memory regions, which may lead to a denial of service or arbitrary code execution by corrupting control flow mechanisms. No authentication is required to trigger this flaw. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A remote command injection issue exists in the POST Request Handler component. The problem occurs within the `formWlbasic()` function located in the `/goform/formWlbasic` file. An attacker can remotely execute arbitrary commands by manipulating the `rootAPmac` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A stack-based buffer overflow occurs in the POST Request Handler component. A remote attacker can trigger this issue by manipulating the `pppUserName` argument within the `formWanTcpipSetup()` function of the '/goform/formWanTcpipSetup' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** An issue in the POST Request Handler component allows remote command injection. The flaw exists within the `formStaDrvSetup()` function located in the '/goform/formStaDrvSetup' endpoint. This occurs when the `rootAPmac` argument is manipulated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow exists in the POST Request Handler component. The issue occurs within the `formQoS()` function of the '/goform/formQoS' endpoint when the `selSSID` argument is manipulated. This flaw allows a remote attacker to trigger the overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A command injection flaw exists in the POST Request Handler component. A remote attacker can trigger this issue by manipulating the `rootAPmac` argument within the `formiNICbasic()` function of the `/goform/formiNICbasic` endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** Command injection is possible via a remote attack in the POST Request Handler component. The issue exists within the `formAccept()` function of the `/goform/formAccept` endpoint, where improper handling of the `submit-url` argument allows for the execution of arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow can be triggered remotely via the POST Request Handler component. The issue exists within the `formiNICSiteSurvey()` function located in the '/goform/formiNICSiteSurvey' endpoint when the `selSSID` argument is manipulated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.