PT-2018-13843 · Asus · Asus Gt-Ac5300

Bigbear · Publicado 2018-09-13 · Atualizado 2020-08-24 · CVE-2018-17022

Positive Technologies (AI Summary)

CVSS v2.0

8.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 router versions through 3.0.0.4.384 32738

Description A stack-based buffer overflow issue allows remote attackers to cause a denial of service (device crash) or possibly have other unspecified impacts. This is achieved by setting a long sh path0 value and then sending an "appGet.cgi?hook=select list(Storage x SharedPath)" request. The ej select list function in router/httpd/web.c uses strcpy, which is vulnerable to this type of attack.

Recommendations For versions through 3.0.0.4.384 32738, as a temporary workaround, consider restricting access to the appGet.cgi endpoint until a patch is available. Avoid using long values for the sh path0 variable in the affected API endpoint until the issue is resolved.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-17022

Produtos afetados

Asus Gt-Ac5300

Referências · 3

• 🔥 https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/buffer_overflow/ASUS%20GT-AC5300%20stack%20overflow.MD · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17022 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17022 · Aviso do Fabricante