CVE-2026-13563: Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow
A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13563?
CVE-2026-13563 has a high severity rating of 8.8.
How do I fix CVE-2026-13563?
To fix CVE-2026-13563, update the Edimax EW-7478APC to the latest firmware version provided by the manufacturer.
What type of attack can be performed through CVE-2026-13563?
CVE-2026-13563 allows for a remote stack-based buffer overflow attack through manipulation of the L2TPUserName parameter.
What systems are affected by CVE-2026-13563?
CVE-2026-13563 specifically affects the Edimax EW-7478APC running firmware version 1.04.
What is the potential impact of CVE-2026-13563?
The potential impact of CVE-2026-13563 includes unauthorized access and control over the affected device due to buffer overflow vulnerabilities.