PT-2023-12309 · Asus · Asus Rt-Ac68U

Robert Chen · Publicado 2023-02-03 · Atualizado 2023-02-13 · CVE-2021-37317

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634

Description The issue allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations. This is due to a Directory Traversal vulnerability in Cloud Disk.

Recommendations For versions prior to 3.0.0.4.386.41634, update the firmware to version 3.0.0.4.386.41634 or later to resolve the issue. As a temporary workaround, consider restricting access to the Cloud Disk feature until the update is applied.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2021-37317

Produtos afetados

Asus Rt-Ac68U

Referências · 4

• 🔥 https://robertchen.cc/blog/2021/03/31/asus-rce · Exploit
• https://t.me/cibsecurity/57494 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-37317 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-37317 · Nota de Segurança