CVE-2020-36109: Buffer Overflow
ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this ASUS RT-AX86U router firmware vulnerability?
The vulnerability ID for this ASUS RT-AX86U router firmware vulnerability is CVE-2020-36109.
What is the severity of CVE-2020-36109?
The severity of CVE-2020-36109 is critical with a severity value of 9.8.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by constructing malicious data that triggers a buffer overflow in the blocking_request.cgi function of the httpd module.
Which version of ASUS RT-AX86U router firmware is affected by this vulnerability?
ASUS RT-AX86U router firmware versions below 9.0.0.4_386 are affected by this vulnerability.
How can I fix the CVE-2020-36109 vulnerability?
To fix the CVE-2020-36109 vulnerability, you should update your ASUS RT-AX86U router firmware to version 9.0.0.4_386 or higher.