CVE-2018-17127

published 2018-09-17

CVE-2018-17127: blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a timestap parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
asus	gt-ac5300_firmware	<= 3.0.0.4.384.32738	—

CWE-476