PT-2023-4143 · Asus · Asus Rt-Ax88U

Published 2023-07-31 · Updated 2023-08-04 · CVE-2023-34359

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ASUS RT-AX88U (affected versions not specified)

Description The issue is related to an error in the do json decode() function of the ej.c file in the ASUS RT-AX88U router's firmware, which can cause a buffer overflow. A remote attacker can exploit this issue by sending a specially crafted request to the device, causing the httpd binary to crash and resulting in a denial-of-service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-04453

CVE-2023-34359

Affected Products

Asus Rt-Ax88U

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-34359 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34359 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04453 · Security Note
• https://t.me/cvenotify/55544 · Telegram Post
• https://t.me/cvenotify/55806 · Telegram Post
• https://t.me/cibsecurity/67438 · Telegram Post
• https://vuldb.com/ru/?id.235774 · Note
• https://cve.report/CVE-2023-34359 · Note
• https://twcert.org.tw/tw/cp-132-7280-bea85-1.html · Note