Paper/Archive/CVE-2023-35087

CVE-2023-35087

ASUS RT-AX56U V2 — ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 64.8.648 × 2013.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cm_processChangedConfigMsg in ccm_processREQ_CHANGED_CONFIG function in AiMesh system. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service. This issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.

Affected

ProductAffectedFixed inSource

RT-AX56U V23.0.0.4.386_50460–CNA

RT-AC86U3.0.0.4_386_51529–CNA

rt-ax56u_v23.0.0.4.386_50460–CISA-ADP

rt-ac86u3.0.0.4_386_51529–CISA-ADP

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-7249-ab2d1-1.html