CVE-2026-9345: Edimax EW-7438RPn webs formWizSurvey buffer overflow
A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipulation of the argument ssid/manualssid/ip/mask/gateway results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote/web administration on the device to prevent remote exploitation of the /goform/formWizSurvey endpoint.
Edimax EW-7438RPn web management remote_management = disabled - Compensating control
Restrict management access to the device to trusted IP addresses only using network ACLs or firewall rules; block access from the public Internet.
- Compensating control
Block or filter requests to the /goform/formWizSurvey path (for example with a WAF, reverse proxy, or firewall) to mitigate exploitation of the formWizSurvey buffer overflow.
- Compensating control
Isolate or remove the device from Internet-facing networks until a vendor fix is available.
- Operational
Monitor device and network logs for suspicious requests to /goform/formWizSurvey and other indicators of exploitation; if compromise is suspected, perform device reset and forensic investigation and rotate administrative credentials.
- Operational
Track vendor advisories and apply any vendor-provided firmware update or patch for the Edimax EW-7438RPn as soon as it becomes available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9345?
CVE-2026-9345 has a high severity score of 8.8.
How do I fix CVE-2026-9345?
To mitigate CVE-2026-9345, update the firmware of your Edimax EW-7438RPn device to the latest version.
What kind of vulnerability is CVE-2026-9345?
CVE-2026-9345 is a buffer overflow vulnerability found in the formWizSurvey function of the Edimax EW-7438RPn.
What are the possible impacts of CVE-2026-9345?
Exploitation of CVE-2026-9345 can result in remote code execution, allowing an attacker to gain control of the device.
Which versions of Edimax EW-7438RPn are affected by CVE-2026-9345?
CVE-2026-9345 affects all versions of Edimax EW-7438RPn up to firmware version 1.31.