The configuration function vulnerability of ASUS RT-AC56U Wi-Fi router software allows a hacker to execute arbitrary code.

The vulnerability of the configuration function of ASUS’ Wi-Fi router software, the RT-AC56U, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Remote code execution

Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...

PT-2022-19351 · Rengine · Rengine

Name of the Vulnerable Software and Affected Versions: Rengine version 1.0.2 Description: The issue is related to a remote code execution RCE vulnerability via the yaml configuration function. Recommendations: For Rengine version 1.0.2, consider disabling the yaml configuration function as a...

CVE-2022-25596: Out-of-bounds Write

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

The vulnerability of the WavpackSetConfiguration64 function in the packUtils.c component of the WavPack audio codec allows a hacker to trigger a service failure by accessing an uninitialized pointer.

The vulnerability of the WavPack audio codec relates to the access to an uninitialized pointer. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a DFF file without proper frequency information...

CVE-2021-30166

CVE-2021-30166 affects Meri t Lilin IP cameras (MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 series). The root cause is the NTP Server configuration function not being verified with special parameters, enabling a remote attacker with privileged access to perform a command injection and execute arbitrary ...

CVE-2021-28175: Buffer Copy without Checking Size of Input

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...