CVE-2019-20082

ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp

published December 28, 2021

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

⚠️ A buffer overflow lurks in the ASUS RT-N53, ready to be exploited through overly long DNS parameters! Think of this as a waiter who keeps pouring water into a glass that’s already full — eventually, it spills everywhere! Here, the overflowing data can lead to unexpected behavior on your router. If an attacker sends a long enough request, they could potentially overwrite critical system memory, leading to unauthorized access or even device crashes. It’s like letting someone hack into the control panel of your home network – definitely not ideal!

Put simply

Think of this as a waiter who keeps pouring water into a glass that’s already full — eventually, it spills everywhere! Here, the overflowing data can lead to unexpected behavior on your router. This vulnerability allows a buffer overflow via the 'lan_dns1_x' or 'lan_dns2_x' parameters on the ASUS RT-N53’s Advanced LAN settings, which can be triggered by a specially crafted request.

What to do

If an attacker sends a long enough request, they could potentially overwrite critical system memory, leading to unauthorized access or even device crashes. It’s like letting someone hack into the control panel of your home network – definitely not ideal! To protect your device, ensure you're running the latest firmware version. Regularly check for updates on the ASUS website and consider disabling remote management features if not needed. 🛡️ You've got this! Stay vigilant and keep your network secure! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02105 · 81.6th percentile
Published
2021-12-28T12:50Z
EPSS history
Timeline
  • 28 DEC 12:50Z
    ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp
    cvelistv5