EUVD-2026-31556
GHSA-ccvm-7xq8-8rx8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain device credentials
-
DeliveryAccess web management interface
-
ExploitSend malicious WPS configuration request
-
ExecutionTrigger stack buffer overflow
-
ImpactExecute arbitrary code
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Stack buffer bounds checking
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Successful exploitation requires authenticated access to the EW-7438RPn web management interface, as indicated by CVSS PR:L (low privileges required). The attacker must be able to reach the device's web interface over the network and possess valid login credentials. Default or weak credentials significantly increase risk. The WPS configuration functionality must be accessible through the web interface. |
| Impact | The CVSS 3.1 score of 8.8 indicates high severity with network-accessible attack vector requiring low privileges (authenticated access to web interface). The CVSS E:P metric confirms proof-of-concept code exists, corroborated by the GitHub repository link. However, this is not listed in CISA KEV, suggesting no confirmed active exploitation in the wild. The risk is elevated for devices with exposed management interfaces but limited for properly segmented networks. Key uncertainty: EPSS score not provided, making it difficult to assess real-world exploitation likelihood beyond the POC availability. |
| Exploit ScenarioDerived | An attacker with valid credentials to the device's web interface sends a specially crafted HTTP request to /goform/formWpsStart containing an oversized pinCode or wlan-url parameter. This triggers the buffer overflow, potentially allowing arbitrary code execution with the privileges of the web server process on the device. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – May 24, 2026
Stack-based buffer overflow in Edimax EW-7438RPn WiFi range extender firmware up to version 1.31 allows authenticated remote attackers to crash or execute code on the device by sending malicious input to the WPS configuration interface. The vulnerability occurs when processing the pinCode or wlan-url parameters in /goform/formWpsStart, with publicly available exploit code on GitHub demonstrating the attack.
RemediationAI
No vendor-released patch identified at time of analysis, as Edimax reportedly did not respond to the disclosure. Primary mitigation: Restrict access to the device's web management interface by implementing network segmentation and firewall rules to block external access to the administration ports. Configure strong authentication credentials if not already implemented. Consider replacing the device with a supported alternative if the management interface must remain accessible, as the lack of vendor response suggests no fix is forthcoming.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The Edimax EW-7438RPn is a WiFi range extender/repeater device. The vulnerability exists in the web management interface component (webs) that handles WPS (WiFi Protected Setup) configuration. The root cause is a classic stack-based buffer overflow (CWE-121) where user-supplied input to the pinCode or wlan-url parameters is copied to a fixed-size buffer without proper bounds checking, allowing memory corruption beyond the allocated stack space.
Know when Ew 7438Rpn gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
1DescriptionCVE.org
A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such manipulation of the argument pinCode/wlan-url leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Executive ViewAI
Edimax EW-7438RPn WiFi range extenders (firmware ≤1.31) contain a stack-based buffer overflow in the WPS configuration interface that allows authenticated attackers to crash devices or execute arbitrary code. Organizations deploying these devices in network infrastructure should immediately inventory affected units, as no vendor patch is currently available and exploit code is publicly documented.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict network access to WPS administrative interface (/goform/formWpsStart) using firewall rules or VLAN segmentation; (2) Disable WPS functionality entirely if not operationally required; (3) Limit administrative credentials to principle of least privilege; (4) Monitor affected devices for unexpected reboots or behavioral anomalies indicating exploitation attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than it was allocated to hold.
Related Vulnerabilities in Edimax EW-7438RPn Multiple Buffer Overflow Vulnerabilities
View all 5More in Ew 7438Rpn
View allStack-based buffer overflow in the Edimax EW-7438RPn 1.31 wireless range extender allows remote attackers with low-privi
Stack-based buffer overflow in the Edimax EW-7438RPn Wi-Fi range extender (firmware 1.31) allows remote authenticated at
Stack-based buffer overflow in the Edimax EW-7438RPn 1.31 Wi-Fi range extender allows remote attackers with low privileg
Stack-based buffer overflow in the Edimax EW-7438RPn Wi-Fi range extender (firmware 1.31) allows authenticated remote at
Stack-based buffer overflow in the Edimax EW-7438RPn 1.31 range extender allows remote authenticated attackers to corrup
Stack-based buffer overflow in the Edimax EW-7438RPn 1.31 wireless range extender enables remote low-privileged attacker
Stack-based buffer overflow in the Edimax EW-7438RPn Wi-Fi range extender (firmware 1.31) allows remote authenticated at
Stack-based buffer overflow in Edimax EW-7438RPn 1.31 range extenders allows authenticated remote attackers to corrupt m
Stack-based buffer overflow in the Edimax EW-7438RPn 1.31 wireless range extender allows remote attackers with low privi
Stack-based buffer overflow in Edimax EW-7438RPn 1.31 wireless range extenders allows remote authenticated attackers to
Exploit-DB