CVE-2020-36109-POC

CVE-2020-36109-POC 2021年2月13日, Altin Thartori, github.com/tin-z 漏洞详情 ASUS RT-AX86U 路由器固件版本低于 9.0.0.4386 时，httpd 模块的 blockingrequest.cgi 函数存在缓冲区溢出，当攻击者构造恶意数据时可导致代码执行。 该漏洞不仅存在于 RT-AX86U 中，也存在于其他使用 httpd 服务的型号中。详情 参考资料： NIST 报告 cvebase 漏洞利用详情 该漏洞不允许我们实现 RCE，实际上只能实现 DoS。 首先是因为 canary，其次是因为 'strcat'...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

ASUS RT-AX86U Buffer Overflow (CVE-2020-36109)

A buffer overflow vulnerability exists in Fortinet ASUS RT-AX86U. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

Buffer overflow

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

PT-2021-11914 · Asus · Asus Rt-Ax86

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX86U router firmware versions prior to 9.0.0.4 386 Description: The issue is related to a buffer overflow in the blocking request.cgi function of the httpd module. This can cause code execution when an attacker constructs malicious...

ASUS RT-AX86U suffers from a buffer overflow vulnerability

The RT-AX86U is a WiFi6 gaming router. The ASUS RT-AX86U suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a memory corruption that could lead to code execution...