CVE-2024-26342 — HIGH (7.5)

Vulnerability Description

A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Asus	4G-Ac68U Firmware	3.0.0.4.384.82230
Asus	4G-Ac68U	-

Related Weaknesses (CWE)

CWE-476

References

https://github.com/Nicholas-wei/bug-discovery/blob/main/asus/2/ASUS_ac68u.mdExploitThird Party Advisory
https://github.com/Nicholas-wei/bug-discovery/blob/main/asus/2/ASUS_ac68u.mdExploitThird Party Advisory

FAQ

What is CVE-2024-26342?

CVE-2024-26342 is a vulnerability with a CVSS score of 7.5 (HIGH). A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet.

How severe is CVE-2024-26342?

CVE-2024-26342 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-26342?

Check the references section above for vendor advisories and patch information. Affected products include: Asus 4G-Ac68U Firmware, Asus 4G-Ac68U.