CVE-2018-17127

Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 devices version 3.0.0.4.384 32738

Description The issue allows remote attackers to cause a denial of service, resulting in a device crash due to a NULL pointer dereference. This can be achieved by sending a request that lacks a timestap parameter to the blocking request.cgi endpoint.

Recommendations For version 3.0.0.4.384 32738, as a temporary workaround, consider restricting access to the blocking request.cgi endpoint until a patch is available. Avoid sending requests without the timestap parameter to minimize the risk of exploitation.