CVE-2021-45756

Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi

published March 23, 2022

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow lurks in the Asus RT-AC68U and RT-AC5300 routers! 🔥 Think of this buffer overflow like a delivery box getting stuffed with too many packages — eventually, it spills over and creates a chaos that can be exploited by anyone nearby. Without proper safeguards, your router could be an open door to unwanted guests! If exploited, this vulnerability could allow an attacker to execute arbitrary code on the device, potentially giving them control over your network. That means they could intercept traffic, access sensitive information, or even use your network for malicious activities — a truly alarming scenario!

Put simply

Think of this buffer overflow like a delivery box getting stuffed with too many packages — eventually, it spills over and creates a chaos that can be exploited by anyone nearby. Without proper safeguards, your router could be an open door to unwanted guests! This buffer overflow occurs in the blocking_request.cgi component, where insufficient validation allows excess data to overflow into adjacent memory, creating a potential avenue for execution of malicious payloads.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the device, potentially giving them control over your network. That means they could intercept traffic, access sensitive information, or even use your network for malicious activities — a truly alarming scenario! Update your Asus routers to the latest firmware versions: RT-AC68U to 3.0.0.4.385.20633 or RT-AC5300 to 3.0.0.4.384.82072. Regularly check for updates to maintain security and avoid vulnerabilities. You've got this! By taking these steps, you’ll be securing your network and keeping those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01243 · 69.0th percentile
Published
2022-03-23T10:49Z
EPSS history
Timeline
  • 23 MAR 10:49Z
    Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi
    cvelistv5