WebDAV vulnerabilities

An untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in the code that processes WebDAV requests.

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

A heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in code that processes data in heap memory.

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.