[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLmDaQC0JTfUK0roWzSG97yro_sBzknawH0LAcdmZA74":3,"g5a-risk:CVE-2017-15655":118},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":68,"weaknesses":69,"weaknessesCount":50,"isActivelyExploited":78,"cisaInfo":15,"otxData":15,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":114,"notableEvents":115},"CVE-2017-15655","What is CVE-2017-15655?","Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version \u003C=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.","Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version \u003C=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but t...","2018-01-31T20:29:00.35","2018-02-21T15:45:01.707",9.6,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","CHANGED","HIGH","CRITICAL",2.8,6,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,8.6,10,0.0309,[41,41,41,41,41,41,41],"Critical",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"asus","asuswrt","*","cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*",1,[52,58,64],{"url":53,"source":54,"tags":55},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F145921\u002FASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html","Packetstormsecurity",[56,57],"Third Party Advisory","VDB Entry",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2018\u002FJan\u002F63","Seclists",[62,63,56],"Exploit","Mailing List",{"url":65,"source":66,"tags":67},"http:\u002F\u002Fsploit.tech\u002F2018\u002F01\u002F16\u002FASUS-part-I.html","Sploit",[62,56],3,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","Certain languages allow direct addressing of memory locations and do not automatically ensure that these locations are valid for the memory buffer that is being referenced. This can cause read or write operations to be performed on memory locations that may be associated with other variables, data structures, or internal program data.","Stable","Class","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2017-15655? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-15655, a critical severity cyber security vulnerability from 2018. Multiple buffer overflow vulnerabilities exist in the H...","CVE-2017-15655, CVE-2017-15655 vulnerability, CVE-2017-15655 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, asus security, asuswrt vulnerability","\u002Fwhat-is\u002Fcve-2017-15655",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-15655","Cybersecurity","CVE-2017-15655, CVE-2017-15655 vulnerability, CVE-2017-15655 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":15,"Negate":15,"Nodes":107},[108],{"Operator":109,"Negate":15,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":113,"VersionEndIncluding":15},"94706BE6-DD37-4F86-8154-5809CE4913A0","3.0.0.4.378",[],[],{"lastModified":11,"cacheTime":117,"version":34},1792367725462,{"score":119,"band":120,"action":121,"scoredAt":122},56,"Medium","Plan remediation","2026-10-16T06:43:20.360411+00:00"]