CVE-2017-11344
HighSummary
A global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for selected router models allows remote attackers to write shellcode at any address in the heap. This can lead to the execution of arbitrary code on the router.
Risk Assessment
This vulnerability poses a serious security risk, allowing remote attackers to gain control over the router and potentially the entire network environment.
Recommendation
It is recommended to update the router firmware to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Other vulnerabilities in Asuswrt-Merlin firmware, ASUS firmware for various router models
Original NVD description (English source)
Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response.