Edimax EW-7438RPn Command Injection Vulnerability in POST Request Handler

A command injection vulnerability has been identified in the Edimax EW-7438RPn router, specifically in version 1.12. The issue arises in the POST request handler, within the 'formAccept' function of the '/goform/formAccep' file. The vulnerability is triggered by manipulating the 'submit-url' argument, allowing remote attackers to execute arbitrary commands on the device. This exploit has been publicly disclosed and is available for use.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the affected device.