PT-2019-9047
CVE-2018-14712
·
تاريخ النشر
2019-05-13
·
تاريخ التحديث
2019-05-14
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ASUS RT-AC3200 version 3.0.0.4.382.50010
Description
A buffer overflow issue exists in the appGet.cgi of the affected device, allowing attackers to inject system commands. This can be achieved by manipulating the
hook URL parameter.Recommendations
For version 3.0.0.4.382.50010, avoid using the
hook parameter in the appGet.cgi until a fix is available. Consider restricting access to the appGet.cgi to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾