CVE-2023-41349

published 2023-09-18

CVE-2023-41349: ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote…

Priority P3 51 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ax88u	>= < 3.0.0.4_388_23748	3.0.0.4_388_23748
asus	rt-ax88u_firmware	< 3.0.0.4.388.23748	3.0.0.4.388.23748

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-134