CVE-2017-11420 : What You Need to Know

A vulnerability related to buffer overflow has been discovered in the ASUS_Discovery.c file in the networkmap feature of the Asuswrt-Merlin firmware utilized by ASUS devices and ASUS firmware for various models such as RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300. This vulnerability allows malicious individuals to remotely execute arbitrary code by exploiting the mishandling of long device information during a strcat operation to a device list.

Understanding CVE-2017-11420

This CVE identifies a stack-based buffer overflow vulnerability in ASUS devices and firmware.

What is CVE-2017-11420?

CVE-2017-11420 is a buffer overflow vulnerability in the Asuswrt-Merlin firmware used by ASUS devices, allowing remote attackers to execute arbitrary code.

The Impact of CVE-2017-11420

The vulnerability enables remote attackers to execute arbitrary code on affected devices, posing a significant security risk.

Technical Details of CVE-2017-11420

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability exists in the ASUS_Discovery.c file in the networkmap feature of Asuswrt-Merlin firmware, leading to a stack-based buffer overflow.

Affected Systems and Versions

ASUS devices including RT-AC5300, RT_AC1900P, RT-AC68U, and more
Asuswrt-Merlin firmware for various models

Exploitation Mechanism

Malicious actors can exploit the vulnerability by manipulating long device information during a strcat operation to a device list.

Mitigation and Prevention

Protecting systems from CVE-2017-11420 requires immediate actions and long-term security practices.

Immediate Steps to Take

Apply security patches provided by ASUS promptly
Monitor vendor communications for updates and advisories
Implement network segmentation to limit the impact of potential attacks

Long-Term Security Practices

Regularly update firmware and software to patch known vulnerabilities
Conduct security assessments and penetration testing to identify weaknesses
Educate users on safe computing practices and awareness of social engineering tactics

Patching and Updates

Regularly check for firmware updates from ASUS and apply them as soon as they are available to mitigate the risk of exploitation.