CVE-2023-35086 is a format string vulnerability in ASUS RT-AX56U V2 and RT-AC86U routers, specifically affecting firmware versions 3.0.0.4.386_50460 and 3.0.0.4_386_51529 respectively. This high-severity vulnerability (CVSS 7.2) allows a remote attacker with administrator privileges to achieve arbitrary code execution, system operations, or disrupt service by exploiting improper input handling in the syslog function. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion, including a Reddit post mentioning a Proof-of-Concept.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0.0.4_386_51529CPE matchmatch criteria | cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4_386_51529:*:*:*:*:*:*:* | ||
3.0.0.4.386_50460CPE matchmatch criteria | cpe:2.3:o:asus:rt-ax56u_v2_firmware:3.0.0.4.386_50460:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.