CVE-2023-34359

HighCVSS 7.5

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

The httpd in the ASUS RT-AX88U device is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request that causes the httpd binary to crash in the 'do_json_decode()' function, resulting in a DoS condition.

Risk Assessment

A DoS attack can lead to device unavailability, affecting network continuity. The organization may experience service interruptions and loss of access to resources.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for potential attacks is advisable.

Other vulnerabilities in ASUS RT-AX88U httpd

CVE-2023-34358High
The httpd software in the ASUS RT-AX88U router is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request, causing the httpd binary to crash during a string comparison.

Original NVD description (English source)

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS