ASUS RT-AX88U - Out-of-bounds Read - 2

CVE-2023-34359

Summary

The HTTP service of the ASUS RT-AX88U router is vulnerable to an unauthenticated Denial of Service (DoS) attack. A remote attacker can exploit this vulnerability by sending a specially crafted request that triggers a failure in the httpd binary, particularly in the 'do_json_decode()' function. This can result in a complete shutdown of the HTTP service, effectively rendering the device unresponsive to further requests, which poses significant risks to network availability.

References