PT-2019-9048 · Asus · Asus Rt-Ac3200

Published 2019-05-13 · Updated 2019-05-14 · CVE-2018-14713

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-AC3200 version 3.0.0.4.382.50010

Description The issue allows attackers to read arbitrary sections of memory and CPU registers. This is achieved via the hook URL parameter in the appGet.cgi.

Recommendations For version 3.0.0.4.382.50010, avoid using the hook parameter in the appGet.cgi until the issue is resolved.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2018-14713

Affected Products

Asus Rt-Ac3200

References · 3

• 🔥 https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14713 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14713 · Vendor Advisory