Description
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | ZenWiFi XT8 | earlier – ≤ 3.0.0.4.388_24609 | — |
| ASUS | ZenWiFi XT8 V2 | earlier – ≤ 3.0.0.4.388_24609 | — |
| ASUS | RT-AX88U | earlier – ≤ 3.0.0.4.388_24198 | — |
| ASUS | RT-AX58U | earlier – ≤ 3.0.0.4.388_23925 | — |
| ASUS | RT-AX57 | earlier – ≤ 3.0.0.4.386_52294 | — |
| ASUS | RT-AC86U | earlier – ≤ 3.0.0.4.386_51915 | — |
| ASUS | RT-AC68U | earlier – ≤ 3.0.0.4.386_51668 | — |
References
- https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html third-party-advisory