CVE-2017-11420
CriticalSummary
A stack-based buffer overflow in ASUSwrt-Merlin firmware and ASUS firmware for various ASUS devices allows remote attackers to execute arbitrary code by sending long device information that is mishandled during a strcat to a device list.
Risk Assessment
This vulnerability poses a serious security risk, allowing remote attackers to gain control over devices. It may lead to unauthorized access to the network and user data.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for potential attack attempts is advised.
Original NVD description (English source)
Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list.