CVE-2021-44158 HIGH

CVE-2021-44158: ASUS RT-AX56U Router - Stack-based buffer overflow

Vendor Asus
Product RT-AX56U
Weakness CWE-121
Published January 3, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.

Key dates

02Disclosure timeline

January 3, 2022 CVE published
September 16, 2024 Record updated