CVE-2017-6548
CriticalSummary
Buffer overflows in the networkmap function on ASUS RT-N56U, RT-N66U, RT-AC66U, and other routers allow remote attackers to execute arbitrary code. The issue affects routers with firmware versions prior to 3.0.0.4.380.7378 and other listed models.
Risk Assessment
Attackers can remotely take control of the router, potentially compromising the local network and leaking data. There is a high risk to the security of the organization's IT infrastructure.
Recommendation
It is recommended to update the router firmware to the latest version to mitigate this vulnerability. Regular monitoring and updating of network devices is crucial for maintaining security.
Original NVD description (English source)
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages.