EUVD-2026-31713
GHSA-3h8q-f835-m698
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stack-based buffer overflow in the Edimax EW-7438RPn 1.31 Wi-Fi range extender allows remote attackers with low privileges to corrupt memory via the submit-url parameter handled by the formrefresh function at /goform/formrefresh. Publicly available exploit code exists per VulDB, though EPSS scoring (0.04%) suggests limited mass exploitation activity, and the vendor has not responded to the disclosure, leaving devices without an official fix.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must reach the device's HTTP management interface (typically LAN-side on consumer range extenders) and possess low-privilege credentials to the web UI as required by CVSS PR:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed: CVSS 4.0 rates the issue 7.4 (High) with network attack vector, low complexity, and high impact to confidentiality, integrity, and availability, yet requires low privileges (PR:L) - meaning an authenticated session to the web admin interface is needed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with low-privilege access to the device's web management interface - for example, a guest or compromised LAN user who has obtained or guessed admin-tier credentials - sends a crafted HTTP request to /goform/formrefresh with an oversized submit-url parameter, triggering the stack overflow in formrefresh. Because publicly available exploit code exists (PoC published at github.com/wudipjq/my_vuln), an attacker can reproduce the crash or, with additional exploit development against this embedded target, attempt code execution to pivot into the local network or persist on the extender. |
| Remediation | No vendor-released patch identified at time of analysis - VulDB explicitly notes Edimax was contacted early but did not respond. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Conduct network inventory scan to identify all Edimax EW-7438RPn devices in production and document their placement, connected assets, and network sensitivity classification. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today