CVE-2021-45756

CriticalCVSS 9.8

Published: 23/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.21%

65th percentile - higher than 65% of all known CVEs

Summary

Asus RT-AC68U before version 3.0.0.4.385.20633 and RT-AC5300 before version 3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service.

Risk Assessment

An attacker could exploit this vulnerability to take control of the router, leading to a breach of confidentiality and integrity of the home or small office network.

Recommendation

Immediately update the router firmware to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi.