CVE-2017-11345

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for selected router models allows remote attackers to execute arbitrary code on the router.

Risk Assessment

Attackers can remotely take control of the router, potentially compromising the local network and leaking data.

Recommendation

It is recommended to update the router firmware to the latest version to mitigate this vulnerability and restrict access to the router management interface from the outside.

Other vulnerabilities in Asuswrt-Merlin firmware, ASUS firmware for various router models

CVE-2017-11344High
A global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for selected router models allows remote attackers to write shellcode at any address in the heap. This can lead to the execution of arbitrary code on the router.

Original NVD description (English source)

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by hosting a crafted device description XML document (that includes a serviceType element) at a URL specified within a Location header in an SSDP response.