CVE-2023-41349

published 2023-09-18

CVE-2023-41349: ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ax88u	>= < 3.0.0.4_388_23748	3.0.0.4_388_23748
asus	rt-ax88u_firmware	< 3.0.0.4.388.23748	3.0.0.4.388.23748

CWE-134