title: ASUS RT-AX56U Router - Stack-based buffer overflow
description: ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.
problem types: CWE-121 Stack-based Buffer Overflow
affected:
{
product: RT-AX56U
vendor: ASUS
versions:
status: affected, version: 3.0.0.4.386.44266
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: ASUS RT-AX56U firmware update version to 3.0.0.4.386.45898