CVE-2020-36109
CRITICALASUS RT-AX86U Firmware < 9.0.0.4_386 - Buffer Overflow in blocking_request.cgi
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-36109. PoCs published by sunn1day, tin-z.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2020-36109, a buffer overflow vulnerability in the ASUS RT-AX86U router's httpd module. The exploit demonstrates a Denial of Service (DoS) condition by crafting a malicious request to the blocking_request.cgi endpoint, though it notes that RCE is not achievable due to stack canary protections.
Description
ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2020-36109, a buffer overflow vulnerability in the ASUS RT-AX86U router's httpd module. The exploit demonstrates a Denial of Service (DoS) condition by crafting a malicious request to the blocking_request.cgi endpoint, though it notes that RCE is not achievable due to stack canary protections.
The repository contains no exploit code or technical details, only a redirect to another GitHub repository. This is a common tactic used in suspicious repos to lure researchers into downloading potentially malicious content from external sources.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H