Skip to content
OpenAdvisories
High · 7.2 CVE-2023-39239 EUVD-2023-42973GHSA-3vqq-6vgg-h45h

ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

Published Sep 7, 2023 · Updated Sep 26, 2024 · Assigned by twcert

Description

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.

Affected products

VendorProductAffectedFixed
ASUS RT-AX55 3.0.0.4.386_50460 —
ASUS RT-AX56U_V2 3.0.0.4.386_50460 —
ASUS RT-AC86U 3.0.0.4_386_51529 —

References