CVEvulnerability

CVE-2023-39238

7.2 HIGH Published 2023-09-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-134

Description

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.

Affected configurations

• asus rt-ax55 firmware 3.0.0.4.386 50460 • asus rt-ax56u v2 firmware 3.0.0.4.386 50460 • asus rt-ac86u firmware 3.0.0.4 386 51529

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References