{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T05:09:51.975","vulnerabilities":[{"cve":{"id":"CVE-2023-39239","sourceIdentifier":"twcert@cert.org.tw","published":"2023-09-07T08:15:07.620","lastModified":"2026-06-17T06:11:49.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nIt is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its  apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n"},{"lang":"es","value":"Se identificó una vulnerabilidad de cadena de formato en la API de función general de ASUS RT-AX56U V2. Esta vulnerabilidad se debe a la falta de validación de un valor específico dentro de su módulo apply.cgi. Un atacante remoto no autenticado puede aprovechar esta vulnerabilidad sin privilegios para realizar la ejecución remota de código arbitrario, el funcionamiento arbitrario del sistema o interrumpir el servicio."}],"affected":[{"source":"twcert@cert.org.tw","affectedData":[{"vendor":"ASUS","product":"RT-AX55","defaultStatus":"unaffected","versions":[{"version":"3.0.0.4.386_50460","status":"affected"}]},{"vendor":"ASUS","product":"RT-AX56U_V2","defaultStatus":"unaffected","versions":[{"version":"3.0.0.4.386_50460","status":"affected"}]},{"vendor":"ASUS","product":"RT-AC86U","defaultStatus":"unaffected","versions":[{"version":"3.0.0.4_386_51529","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"asus","product":"rt-ax56u_v2","defaultStatus":"unaffected","cpes":["cpe:2.3:h:asus:rt-ax56u_v2:-:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0.4.386_50460","status":"affected"}]},{"vendor":"asus","product":"rt-ax55","defaultStatus":"unknown","cpes":["cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0.4.386_50460","status":"affected"}]},{"vendor":"asus","product":"rt-ac86u","defaultStatus":"unknown","cpes":["cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0.4_386_51529","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"twcert@cert.org.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-26T18:53:39.966621Z","id":"CVE-2023-39239","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"twcert@cert.org.tw","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:rt-ax55_firmware:3.0.0.4.386_50460:*:*:*:*:*:*:*","matchCriteriaId":"55D08B1A-85B6-4501-8998-E308F7633DF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:*","matchCriteriaId":"B8F27D4F-EDC4-4676-8C66-545378850BF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:rt-ax56u_v2_firmware:3.0.0.4.386_50460:*:*:*:*:*:*:*","matchCriteriaId":"7201F0D9-5111-414B-8756-3B36838193CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asus:rt-ax56u_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"FFFF5EF7-E4EC-4DA0-82B4-9996087B951F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4_386_51529:*:*:*:*:*:*:*","matchCriteriaId":"E3A1AA3F-0CCF-41B0-B8D7-2D72D82C0261"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*","matchCriteriaId":"89095282-ABBD-4056-B731-7F05638DB1A6"}]}]}],"references":[{"url":"https://https://www.twcert.org.tw/tw/cp-132-7355-0ce8d-1.html","source":"twcert@cert.org.tw","tags":["Broken Link"]},{"url":"https://https://www.twcert.org.tw/tw/cp-132-7355-0ce8d-1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}}]}