CVE-2023-28703: falha de alta gravidade em ASUS RT-AC86U
ASUS RT-AC86U - Buffer Overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.9%
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate service.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ASUS · RT-AC86UCVEs relacionadas — ASUS RT-AC86U
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3080CRITICALASUS Router - Improper AuthenticationEPSS 43.5%CVE-2023-35086HIGHASUS RT-AX56U V2 & RT-AC86U - Format String -1EPSS 38.5%CVE-2023-39237HIGHASUS RT-AC86U - Command injection vulnerability - 5EPSS 1.4%CVE-2023-39236HIGHASUS RT-AC86U - Command injection vulnerability - 4EPSS 1.4%CVE-2023-38033HIGHASUS RT-AC86U - Command injection vulnerability - 3EPSS 1.4%CVE-2023-38032HIGHASUS RT-AC86U - Command injection vulnerability - 2EPSS 1.4%