VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 1, 2021· Updated Jun 17, 2026

CVE-2020-36109

CVE-2020-36109

Description

ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.

Affected products

3
  • Asus/RT-AX86Ullm-fuzzy
    Range: <9.0.0.4_386
  • ASUS/RT-AX86U router firmwaredescription
  • Asus/Rt Ax86u Firmware
    cpe:2.3:o:asus:rt-ax86u_firmware:*:*:*:*:*:*:*:*
    Range: <9.0.0.4_386

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.