CVSS Score of 10 (low)


Published Jul 21, 2023
Updated: Mar 27, 2024
CWE ID 134


CVE-2023-35086 is a format string vulnerability that affects ASUS RT-AX56U V2 and RT-AC86U routers. The vulnerability is caused by directly using input as a format string when calling syslog in the logmessage_normal function of the do_detwan_cgi module in httpd. An attacker with administrator privilege can exploit this vulnerability remotely to execute arbitrary code, perform arbitrary system operations, or disrupt services. The affected firmware versions are RT-AX56U V2: and RT-AC86U: It is important for organizations using these routers to remediate the vulnerability by updating their firmware to a version that addresses this issue to prevent potential exploitation and damage to their systems and networks.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-35086 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options