VulnerabilityModified

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length.

HIGH 8.0EPSS 0.68%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.

CVSS 3.1: 8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.68% probability · 50th percentile
CISA KEV: Not listed
Weakness: CWE-121, CWE-1284
Affected: asus/rt-ax56u firmware
Source: twcert@cert.org.tw

References

https://www.twcert.org.tw/tw/cp-132-5431-d23be-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-5431-d23be-1.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.