Asus Rt-Ax56U V2 vulnerabilities

CVE-2024-11985 [MEDIUM] CWE-20 CVE-2024-11985: An improper input validation vulnerability leads to device crashes in certain ASUS router models. R An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.

CVE-2023-39238 [HIGH] CWE-134 CVE-2023-39238: It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.

CVE-2023-39240 [HIGH] CWE-134 CVE-2023-39240: It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. Thi It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operatio

CVE-2023-39239 [HIGH] CWE-134 CVE-2023-39239: It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vul It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt s

CVE-2023-35087 [CRITICAL] CWE-134 CVE-2023-35087: It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability i It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cm_processChangedConfigMsg in ccm_processREQ_CHANGED_CONFIG function in AiMesh system. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform rem

CVE-2023-35086 [HIGH] CWE-134 CVE-2023-35086: It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability i It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code ex