Stack Overflow Vulnerability in ASUS RT-AX56U Router

CVE-2021-40556

Summary

A stack overflow vulnerability exists in the HTTP service of the ASUS RT-AX56U Router, specifically in version 3.0.0.4.386.44266. This vulnerability arises from the improper handling of user input in the 'caupload' function, which allows an attacker to send excessively large data (up to 0xFFFF bytes) to the stack. Successfully exploiting this weakness could enable attackers to execute arbitrary commands remotely. Although exploitation requires user authentication, the potential for unauthorized execution underscores the importance of prompt remediation.

References