CVE-2017-15655

2018-01-3120:00:00

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.