PT-2022-12005 · Asus · Asus Rt-Ax56U

Jixing Wang · Published 2022-01-03 · Updated 2023-06-26 · CVE-2021-44158

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U Wi-Fi Router (affected versions not specified)

Description The issue is related to a stack-based buffer overflow due to improper validation for httpd parameter length. This allows an authenticated local area network attacker to launch arbitrary code execution, potentially controlling the system or disrupting service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-1284

CWE-121

Related Identifiers

CVE-2021-44158

Affected Products

Asus Rt-Ax56U

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-44158 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44158 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-5431-d23be-1.html · Note
• https://t.me/cibsecurity/34834 · Telegram Post
• https://t.me/cvenotify/25209 · Telegram Post