CVE-2023-41349
Published on: Not Yet Published
Last Modified on: 09/19/2023 09:23:00 PM UTC
Certain versions of Rt-ax88u from Asus contain the following vulnerability:
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.
- CVE-2023-41349 has been assigned by
[email protected] to track the vulnerability - currently rated as HIGH severity. - Affected Vendor/Software: ASUS - RT-AX88U version < 3.0.0.4_388_23748
CVSS3 Score: 8.8 - HIGH
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | LOW | NONE |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | HIGH | HIGH | HIGH |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報-ASUS RT-AX88U - externally-controlled format string | www.twcert.org.tw text/html |
MISC www.twcert.org.tw/tw/cp-132-7371-aecf1-1.html |
There are currently no QIDs associated with this CVE
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware
| Asus | Rt-ax88u | - | All | All | All |
| Operating System | Asus | Rt-ax88u Firmware | All | All | All | All |
- cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*:
- cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE