Edimax EW-7438RPn Command Injection Vulnerability in POST Request Handler

A command injection vulnerability exists in the Edimax EW-7438RPn model running firmware version 1.28a. The issue arises in the POST request handler, specifically within the 'formHwSet' function. Exploitation of this vulnerability can be done remotely by manipulating various arguments related to network configuration, such as 'Anntena', 'Mcs', 'regDomain', 'nic0Addr', 'nic1Addr', 'wlanAddr', 'wanAddr', 'wlanSSID', 'wlanChan', 'comd', 'initgain', 'txcck', and 'txofdm'.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the device.