Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier…
Priority MEDIUM 43CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by sending a crafted http GET request packet that includes a long delete_offline_client parameter in the url.
Why it matters now
EPSS 0.0271 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asuswrt-merlin:asuswrt-merlin:*:*:*:*:*:*:*:* | up to 380.67 | Vulnerable | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac3100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac3200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac51u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac52u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac53:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac55u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac56u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
- cpe:2.3:o:asuswrt-merlin:asuswrt-merlin:*:*:*:*:*:*:*:* Versions up to 380.67 Vulnerable ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac3100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac3200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac51u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac52u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac53:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac55u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:asuswrt-merlin:rt-ac58u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac66u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac66u_b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac68p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac68u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-ac88u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n12\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n12d1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n12hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n12hp_b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n18u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n56u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt-n66u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt_ac1200g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt_ac1200gu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt_ac1900p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
| cpe:2.3:h:asuswrt-merlin:rt_n12\+_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Asuswrt-Merlin |
- cpe:2.3:h:asuswrt-merlin:rt-ac58u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac66u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac66u_b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac68p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac68u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-ac88u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n12\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n12d1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n12hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n12hp_b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n18u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt-n66u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt_ac1200g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt_ac1200gu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt_ac1900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
- cpe:2.3:h:asuswrt-merlin:rt_n12\+_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Asuswrt-Merlin
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-12754
- 2026-10-03 Alias added: GHSA-5373-xwjx-wwr9
References
More Asuswrt-merlin vulnerabilities
- TI-2018-04129 Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on… CVSS 3.1HIGH 8.8
- TI-2018-06420 Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and… CVSS 3.1MEDIUM 5.3
- TI-2018-06419 Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and… CVSS 3.1MEDIUM 5.3
Sources
- CVE-2017-12754 · CVE Program
- CVE-2017-12754 · NVD
- FIRST EPSS
- GHSA-5373-xwjx-wwr9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences