nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-36109 CVE-2020-36109
CRITICAL
Record summary
CVE-2020-36109 has a selected CVSS score of 9.8 (critical); EIP currently links 2 repository PoCs.
Description
ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 2
Proofs of concept
2Repository PoCs
GitHubtin-z/CVE-2020-36109-POCRepository PoCby tin-zStars: 2Not analyzed1 file
GitHubsunn1day/CVE-2020-36109-POCRepository PoCby sunn1dayStars: 17Not analyzed4 files
References
2asus.com
https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory