Security Advisory

CVE-2018-8879

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-21 15:26:03
Last updated 2024-08-05 07:10:46
Assigner mitre
State PUBLISHED

Description

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request. Vulnerable parameters are flag, mac, and cat_id.