high7.5
CVE-2018-20336
An issue was discovered in ASUSWRT 3.0.0.4.384.20308.
Impact
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string over UDP, which may lead to an information leak.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Asuswrt-Merlin | Version 3.0.0.4.384.20308 |