The vulnerability is a classic buffer overflow in the formWlSiteSurvey handler of Edimax BR‑6478AC V2 firmware 1.23, triggered by an attacker manipulating the selSSID argument in a POST request. This flaw falls under the CWE-119 and CWE-120 weakness categories and can allow an attacker to overwrite memory and potentially execute arbitrary code locally on the router. The impact is that the attacker could gain full control of the device, compromising confidentiality, integrity, and availability of the network environment.

The affected product is the Edimax BR‑6478AC V2 Wi‑Fi router, specifically firmware version 1.23. No additional sub‑products or versions are listed, so the scope is limited to this single device model and the mentioned firmware release.

The CVSS score of 8.7 indicates a high severity issue. Although a public exploit has been disclosed, the EPSS score is not available, suggesting uncertainty about immediate exploitation likelihood. The vulnerability can be triggered remotely over the network, but the vendor did not respond to the disclosure, increasing the risk of a timely compromise. The issue is not listed in the CISA KEV catalog, yet the severity and remote nature warrant urgent attention.