A high-severity command injection vulnerability in the Edimax EW-7478APC router poses a significant risk of unauthorized system command execution by authenticated attackers.

This vulnerability is a command injection flaw, categorized under CWE-77 and CWE-74, which allows an attacker with low-level privileges to inject and execute arbitrary system commands through the affected software interface.

The ability for an attacker to perform command injection on network infrastructure equipment like the Edimax EW-7478APC can lead to full device compromise, unauthorized network access, and the potential for lateral movement within the environment. With a CVSS score of 7.4, this vulnerability represents a high risk to business operations, as it may result in data exfiltration or the persistent disruption of critical network services.

Immediate Action: Since a specific patch version is currently unknown, administrators should restrict management access to the device to trusted IP addresses only and monitor vendor channels for firmware updates.

Proactive Monitoring: Review system logs for suspicious process execution patterns or unexpected shell-like commands originating from the web management interface.

Compensating Controls: Implement a Web Application Firewall (WAF) or equivalent network inspection tool to detect and block common command injection syntax in HTTP requests targeting the device.

Public Exploit Available: Unknown

Given the high severity and the confirmed existence of a proof-of-concept, users of the Edimax EW-7478APC should treat this vulnerability with urgency. Prioritize isolating the management interface from untrusted networks and verify if the vendor has released a firmware update to resolve the underlying command injection flaw.