Edimax EW-7438RPn Command Injection Vulnerability in Connection Settings Handler

A command injection vulnerability has been identified in the Edimax EW-7438RPn router, specifically in version 1.12. The issue arises in the connection settings handler, within the function 'formConnectionSetting' of the file '/goform/formConnectionSetting'. The vulnerability allows remote attackers to inject commands by manipulating the 'max_Conn' and 'timeOut' arguments. This exploitation has been publicly disclosed and is currently actionable.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the device.