Critical severity · published Jan 31, 2018
CVE-2017-15655
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X
9.6
CVSS
3.1%
EPSS
No
On KEV
Description
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Asuswrt · Asus
before 3.0.0.4.378 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15655
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15655
Third Party Advisory
http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html
Exploit
http://seclists.org/fulldisclosure/2018/Jan/63
Exploit
http://sploit.tech/2018/01/16/ASUS-part-I.html
More from Asuswrt
9.8
CVE-2022-26376
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7
9.8
CVE-2018-20334
An issue was discovered in ASUSWRT 3.0.0.4.384.20308
9.8
CVE-2018-6000
An issue was discovered in AsusWRT before 3.0.0.4.384_10007
9.8
CVE-2018-5999
An issue was discovered in AsusWRT before 3.0.0.4.384_10007
8.8
CVE-2017-15656
Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt