Description
A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack‑based buffer overflow exists in the formL2TPSetup endpoint of the Edimax EW‑7478APC, caused by an supplied via an HTTP POST request; an attacker can craft a malicious payload that overwrites the return address on the stack and potentially execute arbitrary code, providing full control of the device.

Affected Systems

The vulnerability affects Edimax EW‑7478APC model 1.04. No other versions or products are listed as impacted, so the risk is confined to installations running this firmware revision.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity issue, and the vulnerability is remotely exploitable over the network without authentication. The EPSS score is not available, and the flaw is not currently listed in CISA KEV. Attackers can trigger the overflow by sending a specially crafted POST request to /goform/formL2TPSetup, which may lead to remote code execution on the affected device.

Generated by OpenCVE AI on June 29, 2026 at 13:35 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update from Edimax that includes a fix for the L2TPUserName handling bug.
  • If a patch is not immediately available, block or restrict external access to the /goform/formL2TPSetup endpoint using a firewall or router rules, limiting.
  • Disable the L2TP configuration service or other unused management features on the device to reduce the attack surface.
  • Monitor router logs for abnormal POST requests to the formL2TPSetup endpoint and alert on repeated failures or buffer‑overflow patterns.

Generated by OpenCVE AI on June 29, 2026 at 13:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 29 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 29 Jun 2026 12:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow
First Time appeared Edimax
Edimax ew-7478apc
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:edimax:ew-7478apc:*:*:*:*:*:*:*:*
Vendors & Products Edimax
Edimax ew-7478apc
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Edimax Ew-7478apc
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-29T14:52:14.539Z

Reserved: 2026-06-28T16:12:55.531Z

Link: CVE-2026-13563

cve-icon Vulnrichment

Updated: 2026-06-29T14:13:37.545Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-29T19:00:11Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow