Vulnerability Details CVE-2023-28703
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.3%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2023-28703
-
cpe:2.3:h:asus:rt-ac86u:-
-
cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4.386.51255