Lucene search
PRIOn knowledge basePRION:CVE-2023-39239HistorySep 07, 2023 - 8:15 a.m.
Format string
2023-09-0708:15:00
PRIOn knowledge base
www.prio-n.com
9
format string
vulnerability
asus rt-ax56u
apply.cgi module
remote attacker
remote code execution
system operation
service disruption
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rt-ac86u_firmware | eq | 3.0.438651529 | |
| rt-ax55_firmware | eq | 3.0.438650460 | |
| rt-ax56u_v2_firmware | eq | 3.0.438650460 |
Related
cvelist
cvelist
CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
2023-09-07 07:18:39
nvd
nvd
CVE-2023-39239
2023-09-07 08:15:07
cve
cve
CVE-2023-39239
2023-09-07 08:15:07