Asuswrt-Merlin Project Rt-n66u Firmware vulnerabilities

3 CVEs affecting Asuswrt-Merlin Project Rt-n66u Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11420, published 2017-07-18.

More from Asuswrt-Merlin Project.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-11420, published 2017-07-18. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U,…
• CVE-2017-11344, published 2017-07-17. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U,…
• CVE-2017-11345, published 2017-07-17. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U,…