CVE-2023-39238 | BDVDB-2026-211456 Detail
ASUSRT-AX55
Description#
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Impact#
CAPEC-135 Format String Injection
Weaknesses#
- CWE-134 Use of Externally-Controlled Format String
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.