CVE-2013-6343

Name of the Vulnerable Software and Affected Versions ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374 979

Description The issue is related to multiple buffer overflows in the httpd web.c component. Remote attackers can execute arbitrary code by manipulating the apps name or apps flag parameters in the APP Installation.asp endpoint.

Recommendations For ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374 979, consider restricting access to the APP Installation.asp endpoint until a patch is available. As a temporary workaround, avoid using the apps name and apps flag parameters in the APP Installation.asp endpoint to minimize the risk of exploitation.