CVE-2023-34358

HighCVSS 7.5

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

The httpd software in the ASUS RT-AX88U router is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request, causing the httpd binary to crash during a string comparison.

Risk Assessment

A DoS attack can lead to device unavailability, impacting the continuity of network operations within the organization.

Recommendation

It is recommended to update the router's firmware to the latest version to mitigate this vulnerability.

Other vulnerabilities in ASUS RT-AX88U httpd

CVE-2023-34359High
The httpd in the ASUS RT-AX88U device is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request that causes the httpd binary to crash in the 'do_json_decode()' function, resulting in a DoS condition.

Original NVD description (English source)

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS