A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST…

A buffer overflow vulnerability has been discovered in Edimax BR-6478AC version 1.23 router firmware. The vulnerability affects the formUSBAccount function in the POST request handler component, specifically through manipulation of UserName and Password arguments. The flaw allows for remote exploitation and poses significant security risks. The vulnerability is located in the /goform/formUSBAccount file and can be exploited remotely. Public exploit code has been disclosed and is available for use, making this a critical security concern for affected devices.