ASUS RT-AC86U - Buffer Overflow

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-5796-32617-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-28703
• https://github.com/advisories/GHSA-2pwg-h86c-qrp2
• https://www.sentinelone.com/vulnerability-database/cve-2022-25596/
• https://www.sentinelone.com/vulnerability-database/cve-2023-28703/
• https://www.twcert.org.tw/tw/cp-132-7147-afcf9-1.html
• https://app.opencve.io/cve/?product=rt-ac86u_firmware&vendor=asus
• https://starlabs.sg/blog/2020/08-asuswrt-url-processing-stack-buffer-overflow/
• https://www.variotdbs.pl/vuln/VAR-202305-1438/

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow
• PoCCVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
• PoCCVE-2021-20038: SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
• PoCCVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun
• PoCCVE-2022-0968: Microweber <1.2.12 - Integer Overflow
• PoCCVE-2019-5544: VMware ESXi SLP - Heap Overflow DoS
• PoCfile-missing-nginx-bof-protection: Missing Nginx Buffer Overflow Protection
• PoCCVE-2018-10088: XiongMai uc-httpd 1.0.0 - Buffer Overflow
• PoCCVE-2025-0282: Ivanti Connect Secure - Stack-based Buffer Overflow
• PoCCVE-2025-46817: Redis < 8.2.1 lua script - Integer Overflow
• PoCCVE-2004-1641: Titan FTP ≤ 3.21 - Heap Overflow via Long Commands
• PoCCVE-2006-2173: FileZilla FTP Server 2.2.22 - Buffer Overflow