Lucene search

TwcertVULNRICHMENT:CVE-2024-31163

HistoryJun 14, 2024 - 6:52 a.m.

CVE-2024-31163 ASUS Download Master - Buffer Overflow

2024-06-1406:52:50

CWE-121

twcert

github.com

asus download master

buffer overflow

remote exploit

arbitrary commands

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.

CNA Affected

[
  {
    "vendor": "ASUS",
    "product": "Download Master",
    "versions": [
      {
        "status": "affected",
        "version": "earlier",
        "versionType": "custom",
        "lessThanOrEqual": "3.1.0.113"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.twcert.org.tw/en/cp-139-7870-befb5-2.html

www.twcert.org.tw/tw/cp-132-7869-3db1d-1.html

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

Related for VULNRICHMENT:CVE-2024-31163