PT-2023-7095 · Asus · Asus Rt-Ax57

CVE-2023-47006

·

Published

2023-10-09

·

Updated

2024-01-19

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ASUS RT-AX57 version 3.0.0.4 386 52041
Description The issue exists due to insufficient input validation in the sub 6FC74 function of the ASUS RT-AX57 Wi-Fi router's firmware. This allows a remote attacker to execute arbitrary code by sending a specially crafted request to the lan ipaddr field.
Recommendations For version 3.0.0.4 386 52041, as a temporary workaround, consider restricting access to the sub 6FC74 function until a patch is available. Avoid using the lan ipaddr field in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-08122
CVE-2023-47006

Affected Products

Asus Rt-Ax57