CVE-2021-44158 ASUS RT-AX56U Router - Stack-based buffer overflow
An authenticated local attacker can exploit a stack-based buffer overflow in the router's httpd service to execute arbitrary code or disrupt service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-44158?
CVE-2021-44158 is a high-severity memory corruption vulnerability in ASUS RT-AX56U, published on 3 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.
Which versions are affected by CVE-2021-44158?
It affects 1 product.
Products include Asus Rt-Ax56u Firmware.
How do I fix CVE-2021-44158?
No fix has been published for CVE-2021-44158 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-44158 being exploited?
There is no known exploitation of CVE-2021-44158 in the wild and no public exploit code.
Other vulnerabilities in ASUS RT-AX56U
Sources
Also known as GHSA-m8r5-j3fq-hx58.