Lucene search
PRIOn knowledge basePRION:CVE-2023-39240HistorySep 07, 2023 - 8:15 a.m.
Format string
2023-09-0708:15:00
PRIOn knowledge base
www.prio-n.com
7
format string
asus rt-ax56u v2
iperf
vulnerability
validation
remote attacker
code execution
disrupt service
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rt-ac86u_firmware | eq | 3.0.438651529 | |
| rt-ax55_firmware | eq | 3.0.438650460 | |
| rt-ax56u_v2_firmware | eq | 3.0.438650460 |
Related
cvelist
cvelist
CVE-2023-39240 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
2023-09-07 07:25:32
nvd
nvd
CVE-2023-39240
2023-09-07 08:15:07
cve
cve
CVE-2023-39240
2023-09-07 08:15:07