PT-2019-9048 · Asus · Asus Rt-Ac3200

Publicado 2019-05-13 · Atualizado 2019-05-14 · CVE-2018-14713

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-AC3200 version 3.0.0.4.382.50010

Description The issue allows attackers to read arbitrary sections of memory and CPU registers. This is achieved via the hook URL parameter in the appGet.cgi.

Recommendations For version 3.0.0.4.382.50010, avoid using the hook parameter in the appGet.cgi until the issue is resolved.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2018-14713

Produtos afetados

Asus Rt-Ac3200

Referências · 3

• 🔥 https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14713 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14713 · Aviso do Fabricante