Lucene search
PRIOn knowledge basePRION:CVE-2023-35087HistoryJul 21, 2023 - 8:15 a.m.
Format string
2023-07-2108:15:00
PRIOn knowledge base
www.prio-n.com
4
asus
router
vulnerability
unauthenticated
remote attacker
arbitrary code execution
service disruption
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cm_processChangedConfigMsg in ccm_processREQ_CHANGED_CONFIG function in AiMesh system. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
This issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rt-ac86u_firmware | eq | 3.0.438651529 | |
| rt-ax56u_v2_firmware | eq | 3.0.438650460 |
Related
cvelist
cvelist
CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2
2023-07-21 07:11:03
cve
cve
CVE-2023-35087
2023-07-21 08:15:09
nvd
nvd
CVE-2023-35087
2023-07-21 08:15:09