CVE-2017-15655

published 2018-01-31

CVE-2017-15655: Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but…

critical 9.6 CVSS 3.0

AV N AC L PR N UI R S C C H I H A H

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
asus	asuswrt	< 3.0.0.4.378	3.0.0.4.378

CWE-119