fyi ac66u n56u v3.0.0.4.374_979

[robvanhooren]

asus -- rt-ac66u_firmware

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6343

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp.
2014-01-22 10.0 CVE-2013-6343

 

[L&LD]

Uhm, that code is old. All the way from 2013.10.11.

I hope nobody is running that today?

 

[robvanhooren]

old? October to early Jan ... barely 10 weeks, by my count.

and just two releases back, with no specifics as to whether the holes were closed in either of them since.

not too often a perfect 10.0 comes along; let's hope folks are diligent enough to upgrade if they haven't yet done so.

cheers,

R.

Uhm, that code is old. All the way from 2013.10.11.

I hope nobody is running that today?