ASUS Router Multiple Vulnerabilities

Release Date: 6 Sep 2023 4663 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in ASUS Router. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and denial of service condition on the targeted system.

Impact

Denial of Service
Remote Code Execution

System / Technologies affected

RT-AX55: 3.0.0.4.386_50460
RT-AX56U_V2: 3.0.0.4.386_50460
RT-AC86U: 3.0.0.4_386_51529

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

RT-AX55: Update to version 3.0.0.4.386_51948 or later
RT-AX56U_V2: Update to version 3.0.0.4.386_51948 or later
RT-AC86U: Update to version 3.0.0.4.386_51915 or later

Vulnerability Identifier

CVE-2023-38031
CVE-2023-38032
CVE-2023-38033
CVE-2023-39236
CVE-2023-39237
CVE-2023-39238
CVE-2023-39239
CVE-2023-39240

Source

TWCERT