Vulnerability Details CVE-2023-28703
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.1%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2023-28703
-
cpe:2.3:h:asus:rt-ac86u:-
-
cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4.386.51255