PT-2023-7095 · Asus · Asus Rt-Ax57

CVE-2023-47006

·

Publicado

2023-10-09

·

Atualizado

2024-01-19

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ASUS RT-AX57 version 3.0.0.4 386 52041
Description The issue exists due to insufficient input validation in the sub 6FC74 function of the ASUS RT-AX57 Wi-Fi router's firmware. This allows a remote attacker to execute arbitrary code by sending a specially crafted request to the lan ipaddr field.
Recommendations For version 3.0.0.4 386 52041, as a temporary workaround, consider restricting access to the sub 6FC74 function until a patch is available. Avoid using the lan ipaddr field in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08122
CVE-2023-47006

Produtos afetados

Asus Rt-Ax57