CVE-2017-11344
Last modified
CVE-2017-11344 is a vulnerability of currently unknown severity. Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response.. EPSS estimates a 2.76% chance of exploitation in the next 30 days.
Description
Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Asuswrt-Merlin Project | Rt-Ac5300 Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt Ac1900p Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac68u Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac68p Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac88u Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac66u Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac66u B1 Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac58u Firmware | <= 3.0.0.4.380.7485 |
| Asuswrt-Merlin Project | Rt-Ac56u Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac55u Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt-Ac52u Firmware | <= 3.0.0.4.380.4180 |
| Asuswrt-Merlin Project | Rt-Ac51u Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt-N18u Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-N66u Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt-N56u Firmware | <= 3.0.0.4.378.7177 |
| Asuswrt-Merlin Project | Rt-Ac3200 Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt-Ac3100 Firmware | <= 3.0.0.4.380.7743 |
| Asuswrt-Merlin Project | Rt Ac1200gu Firmware | <= 3.0.0.4.380.5577 |
| Asuswrt-Merlin Project | Rt Ac1200g Firmware | <= 3.0.0.4.380.3167 |
| Asuswrt-Merlin Project | Rt-Ac1200 Firmware | <= 3.0.0.4.380.9880 |
| Asuswrt-Merlin Project | Rt-Ac53 Firmware | <= 3.0.0.4.380.9883 |
| Asuswrt-Merlin Project | Rt-N12hp Firmware | <= 3.0.0.4.380.2943 |
| Asuswrt-Merlin Project | Rt-N12hp B1 Firmware | <= 3.0.0.4.380.3479 |
| Asuswrt-Merlin Project | Rt-N12d1 Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt-N12\+ Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt N12\+ Pro Firmware | <= 3.0.0.4.380.9880 |
| Asuswrt-Merlin Project | Rt-N16 Firmware | <= 3.0.0.4.380.7378 |
| Asuswrt-Merlin Project | Rt-N300 Firmware | <= 3.0.0.4.380.7378 |
References
- http://www.openwall.com/lists/oss-security/2017/07/14/3Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/07/14/3Mailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-11344?
How severe is CVE-2017-11344?
How do I fix CVE-2017-11344?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-11339There is a heap-based buffer overflow in the Image::printIFD…
- CVE-2017-1134IBM Reliable Scalable Cluster Technology could allow a local…
- CVE-2017-11340There is a Segmentation fault in the XmpParser::terminate() …
- CVE-2017-11341There is a heap based buffer over-read in lexer.hpp of LibSa…
- CVE-2017-11342There is an illegal address access in ast.cpp of LibSass 3.4…
- CVE-2017-11343Due to an incomplete fix for CVE-2012-6125, all versions of …
- CVE-2017-11345Stack buffer overflow in networkmap in Asuswrt-Merlin firmwa…
- CVE-2017-11346Zoho ManageEngine Desktop Central before build 100092 allows…
- CVE-2017-11347Authenticated Code Execution Vulnerability in MetInfo 5.3.17…
- CVE-2017-11348In Octopus Deploy 3.x before 3.15.4, an authenticated user w…
- CVE-2017-11349dataTaker DT8x dEX 1.72.007 allows remote attackers to compo…9.8
- CVE-2017-11350Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSe…
Are you affected by CVE-2017-11344?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST