Back to overview

CVE-2026-13562

HIGH
8.8
CVSS 3.1
Description
A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID
CVE-2026-13562
State
PUBLISHED
Assigner
VulDB
Reserved
2026-06-28 16:12 UTC
Published
2026-06-29 11:15 UTC
Last updated
2026-06-29 11:15 UTC
Primary CWE
CWE-120
Buffer Overflow
Vendor / Product
Edimax / EW-7478APC
Sources
cve.org  ·  NVD

Severity & Metrics

8.8 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
Affected products (1)
VendorProductPlatformVersions
Edimax EW-7478APC — 1.04
Weakness (CWE)
CWESourceDescription
CWE-119 cna Memory Corruption
CWE-120 cna Buffer Overflow
CVSS scores (4)
ScoreSeverityVersionSourceVector
9.0 N/D 2.0 cna AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
8.8 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
8.8 HIGH 3.0 cna CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
8.7 HIGH 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References (5)
Back to overview