Skip to content
OpenAdvisories
High · 7.2 CVE-2023-28703 EUVD-2023-32346GHSA-2pwg-h86c-qrp2

ASUS RT-AC86U - Buffer Overflow

Published Jun 2, 2023 · Updated Jan 8, 2025 · Assigned by twcert

Description

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate service.

Affected products

VendorProductAffectedFixed
ASUS RT-AC86U 3.0.0.4.386.51255 —

References