Wxhwxhwxh_Mie

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A remote buffer overflow occurs in the `formWlSiteSurvey()` function within the `/goform/formWlSiteSurvey` endpoint. This issue is triggered by manipulating the `selSSID` variable. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formWlSiteSurvey` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A remote command injection flaw exists in the `setWAN()` function within the '/goform/setWAN' endpoint. This issue occurs when the `pppUserName`, `pptpUserName`, or `L2TPUserName` arguments are manipulated, allowing an attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `pppUserName`, `pptpUserName`, and `L2TPUserName` parameters in the '/goform/setWAN' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** Remote command injection is possible through the manipulation of the `rootAPmac` argument within the `formWlbasic()` function of the '/goform/formWlbasic' endpoint. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the target device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/goform/formWlbasic' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A stack-based buffer overflow occurs in the `formWanTcpipSetup()` function within the `/goform/formWanTcpipSetup` file. This issue is triggered by the manipulation of the `pppUserName` argument, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** Remote command injection is possible through the manipulation of the `interface` argument within the `stainfo()` function of the '/goform/stainfo' endpoint. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the target device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow occurs in the POST Request Handler component when processing the `selSSID` argument. This issue is located within the `formiNICSiteSurvey()` function of the '/goform/formiNICSiteSurvey' endpoint and can be triggered remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the `submit-url` argument within the `formAccept()` function of the '/goform/formAccept' endpoint. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A stack-based buffer overflow exists in the POST Request Handler component. The issue occurs within the `formL2TPSetup()` function located in the `/goform/formL2TPSetup` endpoint when the `L2TPUserName` argument is manipulated. This flaw allows a remote attacker to trigger the overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formL2TPSetup` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the `rootAPmac` argument within the `formStaDrvSetup()` function of the `/goform/formStaDrvSetup` endpoint. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** Remote OS command injection is possible via the POST Request Handler component. The issue exists in the `formiNICbasic()` function within the `/goform/formiNICbasic` file. An attacker can remotely execute arbitrary operating system commands by manipulating the `rootAPmac` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formiNICbasic` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBAccount()` function located in the `/goform/formUSBAccount` endpoint. A remote attacker can trigger this flaw by manipulating the `UserName` and `Password` variables. A buffer overflow is a condition where a program writes more data to a block of memory, or buffer, than it is allowed to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Isolate affected devices immediately.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A buffer overflow occurs in the POST Request Handler component when processing the `formQoS()` function within the '/goform/formQoS' endpoint. This issue is triggered by the manipulation of the `selSSID` argument, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A remote buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBFolder()` function located in the `/goform/formUSBFolder` endpoint when processing the `ShareName` or `SelectName` arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax EW-7478APC version 1.04 **Description** A stack-based buffer overflow exists in the POST Request Handler component. This issue occurs when the `formPPPoESetup()` function in the `/goform/formPPPoESetup` endpoint fails to properly handle the `pppUserName` argument. A remote attacker can exploit this by manipulating the `pppUserName` variable to cause a memory corruption. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/formPPPoESetup` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V2 version 1.23 **Description** Command injection can be launched remotely via the POST Request Handler component. The issue exists within the `wiz 5in1 redirect()` function located in the '/goform/wiz 5in1 redirect' endpoint. Manipulation of the `newpass` variable allows for the execution of arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC V2 version 1.23 **Description** A security flaw in the POST Request Handler component allows for remote command injection. This occurs through the manipulation of the `command` argument within the `mp()` function of the '/goform/mp' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/mp' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow exists in the POST Request Handler component. The issue occurs within the `formUSBAccount()` function of the `/goform/formUSBAccount` endpoint when manipulating the `UserName` and `Password` arguments, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A buffer overflow exists in the POST Request Handler component within the `formUSBFolder()` function of the `/goform/formUSBFolder` endpoint. The issue is caused by improper handling and lack of bounds checking of the `ShareName` and `SelectName` arguments. A remote attacker can send a long string as input to overwrite adjacent memory regions, which may lead to a denial of service or arbitrary code execution by corrupting control flow mechanisms. No authentication is required to trigger this flaw. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A remote command injection issue exists in the POST Request Handler component. The problem occurs within the `formWlbasic()` function located in the `/goform/formWlbasic` file. An attacker can remotely execute arbitrary commands by manipulating the `rootAPmac` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Edimax BR-6478AC version 1.23 **Description** A stack-based buffer overflow occurs in the POST Request Handler component. A remote attacker can trigger this issue by manipulating the `pppUserName` argument within the `formWanTcpipSetup()` function of the '/goform/formWanTcpipSetup' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.