Patch Ticker

ASUS router firmware out-of-bounds write flaw

Router firmware can be broken into by a nearby attacker.

Summary

An out-of-bounds write flaw in ASUS router firmware lets an unauthenticated attacker nearby overwrite data or cause a denial of service with a crafted packet. The affected series are ASUSWRT 3.0.0.4_386, 3.0.0.4_388 and 3.0.0.6_102.

Affected when

  • Attacker must be on a nearby network to the router

What to do

Check the ASUS security advisory and update the router firmware to the latest version. The sources do not name a fixed version.

Products and platforms

  • ASUS Router firmware

CVE IDs

Times

First published

First seen