Vulnerability Description
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Asus | Rt-Ax88U Firmware | < 3.0.0.4.388.23748 |
| Asus | Rt-Ax88U | - |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/tw/cp-132-7279-05760-1.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7279-05760-1.htmlThird Party Advisory
FAQ
What is CVE-2023-34358?
CVE-2023-34358 is a vulnerability with a CVSS score of 7.5 (HIGH). ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary ...
How severe is CVE-2023-34358?
CVE-2023-34358 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-34358?
Check the references section above for vendor advisories and patch information. Affected products include: Asus Rt-Ax88U Firmware, Asus Rt-Ax88U.