EUVD-2026-33484
GHSA-rfrj-7c7m-jchq
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation of the argument ShareName/SelectName results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
AnalysisAI
Remote buffer overflow in the Edimax BR-6478AC 1.23 wireless router allows authenticated attackers to corrupt memory via the formUSBFolder POST handler by supplying oversized ShareName or SelectName arguments. Publicly available exploit code exists (hosted on a Notion page referenced by VulDB), and the CVSS 4.0 score of 7.4 reflects high confidentiality, integrity, and availability impact on the device with low privileges required. No CISA KEV listing, so this is best treated as a publicly weaponizable bug awaiting a vendor response.
Technical ContextAI
The Edimax BR-6478AC is a consumer/SOHO 802.11ac wireless router whose web-administration interface exposes /goform/* endpoints implemented by a CGI-like handler embedded in the device firmware. The vulnerable formUSBFolder function processes POST parameters tied to USB share configuration (ShareName and SelectName) and copies attacker-supplied input into a fixed-size stack/heap buffer without proper length validation, which is the classic CWE-120 (Classic Buffer Overflow / unbounded memcpy/strcpy pattern). Because router firmware of this class is typically a MIPS or ARM ELF with no/limited ASLR, partial NX, and no stack canaries, a controlled overflow in such a handler is a strong primitive for memory corruption and potential code execution as the web daemon (usually root on embedded Linux). The affected component is identified by CPE cpe:2.3:a:edimax:br-6478ac:*:*:*:*:*:*:*:* with the BR-6478ACV2 hardware revision explicitly named in the public PoC writeup.
RemediationAI
No vendor-released patch identified at time of analysis, so administrators should apply compensating controls until Edimax publishes updated firmware: restrict access to the router's web administration interface to trusted management VLANs or LAN-only (disable any 'remote management' / WAN-side admin option), which eliminates the network attack surface at the cost of needing on-network access for changes; change default administrator credentials and enforce strong unique passwords to raise the bar for the PR:L precondition; disable the USB sharing feature entirely if not in use, which removes the vulnerable formUSBFolder code path at the cost of losing network USB share functionality; and consider replacing the device if it is end-of-life. Monitor the Edimax support site and the VulDB entry at https://vuldb.com/vuln/367417 for an official fix, and subscribe to vendor security notifications so the patch can be applied as soon as it is released.
Stack-based buffer overflow in the Edimax BR-6478AC 1.23 wireless router enables authenticated remote attackers to corru
Buffer overflow in the Edimax BR-6478AC v1.23 wireless router allows authenticated remote attackers to corrupt memory by
Buffer overflow in the Edimax BR-6478AC 1.23 router's web management interface allows remote attackers with low-level cr
Remote buffer overflow in the Edimax BR-6478AC router (firmware 1.23) allows authenticated attackers to corrupt memory b
Stack/buffer overflow in the Edimax BR-6478AC 1.23 wireless router's web management interface allows authenticated remot
Command injection in Edimax BR-6478AC firmware 1.23 allows a remotely authenticated attacker to execute arbitrary OS com
Authenticated command injection in Edimax BR-6478AC 1.23 firmware allows network-adjacent attackers with low-privilege c
Command injection in Edimax BR-6478AC 1.23 exposes the router's web management interface to remote exploitation via a cr
Command injection in the Edimax BR-6478AC 1.23 wireless router's formAccept POST handler allows an authenticated remote
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today