CVE-2018-5721

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...

CVE-2018-5721

CVE-2018-5721 refers to a stack-based buffer overflow in the ej_update_variables function within router/httpd/web.c on ASUS routers (via software from github.com/RMerl/asuswrt-merlin). The vulnerability occurs because the length of the variable action_script is not checked, as long as the value i...