ASUS router firmware stack overflow allows root commands
Anyone nearby can plant commands on the router with admin power.
Summary
A stack-based buffer overflow in ASUS router firmware lets an unauthenticated attacker nearby run arbitrary commands as root via a crafted device name. The affected series are ASUSWRT 3.0.0.4_386, 3.0.0.4_388 and 3.0.0.6_102.
Affected when
- Attacker nearby the device
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen