CVE-2013-6343

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.55% chance of exploitation in the next 30 days, 95th percentile

Published

2014-01-22

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://infosec42.blogspot.com/2014/01/exploit-asus-rt-n56u-remote-root-shell.html
• http://www.exploit-db.com/exploits/31033

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31033

References

• CVE Record
• NVD entry

Related

• CVE-2013-6341
• CVE-2013-6357
• CVE-2013-6295
• CVE-2013-6358
• CVE-2013-6283
• CVE-2013-6364