CVE-2023-35086

CVSS Score of 10 (low)

Details

Published Jul 21, 2023
Updated: Mar 27, 2024
CWE ID 134

Summary

CVE-2023-35086 is a format string vulnerability that affects ASUS RT-AX56U V2 and RT-AC86U routers. The vulnerability is caused by directly using input as a format string when calling syslog in the logmessage_normal function of the do_detwan_cgi module in httpd. An attacker with administrator privilege can exploit this vulnerability remotely to execute arbitrary code, perform arbitrary system operations, or disrupt services. The affected firmware versions are RT-AX56U V2: 3.0.0.4.386_50460 and RT-AC86U: 3.0.0.4_386_51529. It is important for organizations using these routers to remediate the vulnerability by updating their firmware to a version that addresses this issue to prevent potential exploitation and damage to their systems and networks.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-35086 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options