Paper/Archive/CVE-2024-33278

CVE-2024-33278

asus rt-ax88u_firmware — Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbit…

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 57.7.577 × 2011.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrary code via the connection_state_machine due to improper length validation for the cookie field.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

rt-ax88u_firmware3.0.0.4.388_24198–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refasus.com/content/asus-product-security-advisory refgist.github.com/viktoredstrom/cd2580fb0e93e47133b2998553b0a52f