CVE-2017-11420

Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P…

published July 18, 2017

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

āš ļø A stack-based buffer overflow awaits in your ASUS router's firmware! One mismanaged device info string can let remote attackers run amok. šŸš€ Think of it like a restaurant that tries to seat more customers than it has room for. If the waiter doesn't properly check the number of seats, it can lead to a chaotic overflow, and suddenly everyone's on each other's laps! In this case, an attacker could exploit this overflow to run arbitrary code on your device. This means they could potentially take control of your router and do anything from spying on your network activity to redirecting your traffic — absolutely devastating!

Put simply

Think of it like a restaurant that tries to seat more customers than it has room for. If the waiter doesn't properly check the number of seats, it can lead to a chaotic overflow, and suddenly everyone's on each other's laps! This vulnerability arises in the Asuswrt-Merlin firmware when a long device information string is mishandled during a strcat operation on the device list, leading to a stack-based buffer overflow.

What to do

In this case, an attacker could exploit this overflow to run arbitrary code on your device. This means they could potentially take control of your router and do anything from spying on your network activity to redirecting your traffic — absolutely devastating! Be sure to check for firmware updates from ASUS for your affected device models and apply any patches they release. Regularly reviewing your router's configurations can also help prevent exploitation. šŸ›”ļø You can fix this! Stay proactive and keep your firmware updated to secure your network. You've got this! šŸ’Ŗ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05607 Ā· 92.9th percentile
Published
2017-07-18T05:00Z
EPSS history
Timeline
  • 18 JUL 05:00Z
    Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P…
    cvelistv5