CVE-2023-28703 (rt-ac86u_firmware)

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate service.

asus buffer buffer overflow buffer overflow vulnerability cve disrupt exploit function header length network network packet overflow packet privileges service stack system validation vulnerability