CVE-2017-6548

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U…

published March 9, 2017

CVSS
—
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

🚨 A crafty little buffer overflow in several ASUS routers could let attackers execute arbitrary code — like a guest sneaking into a restaurant kitchen and cooking whatever they want! 🔥 Think of your router as a busy restaurant. If the chef (your router) doesn't check the ingredients (data packets) properly, a sneaky guest can toss in something extra long and set off a chain reaction that messes with the entire menu! This means an attacker could take full control of your router, which could lead to data breaches, man-in-the-middle attacks, or even network downtime. Imagine someone taking over your restaurant's menu and serving whatever they desire to your unsuspecting customers!

Put simply

Think of your router as a busy restaurant. If the chef (your router) doesn't check the ingredients (data packets) properly, a sneaky guest can toss in something extra long and set off a chain reaction that messes with the entire menu! This vulnerability in the ASUS RT routers allows attackers to exploit buffer overflow issues by sending crafted multicast messages with excessively long host or port fields, enabling them to run malicious code remotely.

What to do

This means an attacker could take full control of your router, which could lead to data breaches, man-in-the-middle attacks, or even network downtime. Imagine someone taking over your restaurant's menu and serving whatever they desire to your unsuspecting customers! To protect your network, upgrade your router firmware to at least version 3.0.0.4.380.7378 for most models, or 3.0.0.4.380.7266 for the RT-AC68W. If you're using Asuswrt-Merlin, update to version 380.65_2 or newer. Regularly check for firmware updates to stay secure. You've got this! Follow these steps to secure your routers and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.21342 · 97.6th percentile
Published
2017-03-09T09:26Z
EPSS history
Timeline
  • 09 MAR 09:26Z
    Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U…
    cvelistv5