Lucene search
PRIOn knowledge basePRION:CVE-2023-39238HistorySep 07, 2023 - 8:15 a.m.
Format string
2023-09-0708:15:00
PRIOn knowledge base
www.prio-n.com
10
format string vulnerability
asus rt-ax56u v2
set_iperf3_svr.cgi module
lacking validation
remote attacker
arbitrary code execution
arbitrary system operation
disrupt service
unauthenticated
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific valueΒ within its set_iperf3_svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rt-ac86u_firmware | eq | 3.0.438651529 | |
| rt-ax55_firmware | eq | 3.0.438650460 | |
| rt-ax56u_v2_firmware | eq | 3.0.438650460 |
Related
cvelist
cvelist
CVE-2023-39238 ASUS RT-AX55γRT-AX56U_V2 - Format String - 1
2023-09-07 07:10:47
nvd
nvd
CVE-2023-39238
2023-09-07 08:15:07
cve
cve
CVE-2023-39238
2023-09-07 08:15:07