Vulnerabilities > Asus > RT Ac86U Firmware > 3.0.0.4.386.51255

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2023-28702 OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.4.386.51255
ASUS RT-AC86U does not filter special characters for parameters in specific web URLs.
network
low complexity
asus CWE-78
8.8
2023-06-02 CVE-2023-28703 Out-of-bounds Write vulnerability in Asus Rt-Ac86U Firmware 3.0.0.4.386.51255
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length.
network
low complexity
asus CWE-787
7.2