Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-11344: Asuswrt-Merlin firmware can let attackers run code on router

CVE-2017-11344 · published 9 years ago

Summary

The Asuswrt‑Merlin firmware used in several ASUS router models has a memory handling flaw that could let a remote attacker place malicious code into the router’s memory. By serving a specially crafted XML file, an attacker could cause the router to execute unwanted commands, potentially taking control of the device. Update the router’s firmware to the latest version from the vendor to close this gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
asuswrt-merlin_project	rt-ac5300_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac5300_firmware::::::::`
asuswrt-merlin_project	rt_ac1900p_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt_ac1900p_firmware::::::::`
asuswrt-merlin_project	rt-ac68u_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac68u_firmware::::::::`
asuswrt-merlin_project	rt-ac68p_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac68p_firmware::::::::`
asuswrt-merlin_project	rt-ac88u_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac88u_firmware::::::::`
asuswrt-merlin_project	rt-ac66u_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_firmware::::::::`
asuswrt-merlin_project	rt-ac66u_b1_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_b1_firmware::::::::`
asuswrt-merlin_project	rt-ac58u_firmware	<= 3.0.0.4.380.7485 `cpe:2.3:o:asuswrt-merlin_project:rt-ac58u_firmware::::::::`
asuswrt-merlin_project	rt-ac56u_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac56u_firmware::::::::`
asuswrt-merlin_project	rt-ac55u_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-ac55u_firmware::::::::`
asuswrt-merlin_project	rt-ac52u_firmware	<= 3.0.0.4.380.4180 `cpe:2.3:o:asuswrt-merlin_project:rt-ac52u_firmware::::::::`
asuswrt-merlin_project	rt-ac51u_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-ac51u_firmware::::::::`
asuswrt-merlin_project	rt-n18u_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-n18u_firmware::::::::`
asuswrt-merlin_project	rt-n66u_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-n66u_firmware::::::::`
asuswrt-merlin_project	rt-n56u_firmware	<= 3.0.0.4.378.7177 `cpe:2.3:o:asuswrt-merlin_project:rt-n56u_firmware::::::::`
asuswrt-merlin_project	rt-ac3200_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac3200_firmware::::::::`
asuswrt-merlin_project	rt-ac3100_firmware	<= 3.0.0.4.380.7743 `cpe:2.3:o:asuswrt-merlin_project:rt-ac3100_firmware::::::::`
asuswrt-merlin_project	rt_ac1200gu_firmware	<= 3.0.0.4.380.5577 `cpe:2.3:o:asuswrt-merlin_project:rt_ac1200gu_firmware::::::::`
asuswrt-merlin_project	rt_ac1200g_firmware	<= 3.0.0.4.380.3167 `cpe:2.3:o:asuswrt-merlin_project:rt_ac1200g_firmware::::::::`
asuswrt-merlin_project	rt-ac1200_firmware	<= 3.0.0.4.380.9880 `cpe:2.3:o:asuswrt-merlin_project:rt-ac1200_firmware::::::::`
asuswrt-merlin_project	rt-ac53_firmware	<= 3.0.0.4.380.9883 `cpe:2.3:o:asuswrt-merlin_project:rt-ac53_firmware::::::::`
asuswrt-merlin_project	rt-n12hp_firmware	<= 3.0.0.4.380.2943 `cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_firmware::::::::`
asuswrt-merlin_project	rt-n12hp_b1_firmware	<= 3.0.0.4.380.3479 `cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_b1_firmware::::::::`
asuswrt-merlin_project	rt-n12d1_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-n12d1_firmware::::::::`
asuswrt-merlin_project	rt-n12\+_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-n12\+_firmware::::::::`
asuswrt-merlin_project	rt_n12\+_pro_firmware	<= 3.0.0.4.380.9880 `cpe:2.3:o:asuswrt-merlin_project:rt_n12\+_pro_firmware::::::::`
asuswrt-merlin_project	rt-n16_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-n16_firmware::::::::`
asuswrt-merlin_project	rt-n300_firmware	<= 3.0.0.4.380.7378 `cpe:2.3:o:asuswrt-merlin_project:rt-n300_firmware::::::::`

Original advisory text

Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response.

References

http://www.openwall.com/lists/oss-security/2017/07/14/3 Mailing List Third Party Advisory
https://asuswrt.lostrealm.ca/changelog

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Exploitation

3% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published17 Jul 2017

Updated30 Oct 2026

First seen29 Sep 2026

Sources

CVE-2017-11344 · NVD

Track software like this

Free during beta