A stack‑based buffer overflow in ASUS router firmware allows an authenticated nearby user to execute arbitrary code by uploading a specially crafted configuration file that exceeds the expected buffer size. The exploitation can lead to full control of the device, enabling firmware manipulation, traffic interception, or lateral movement into the local network. The identified weakness aligns with CWE‑121 and is rated with a CVSS score of 9.3, indicating severe risk.

The vulnerability affects ASUS routers running firmware in the 3.0.0.6.102 series. Administrators should verify whether their devices run this firmware or earlier versions that have not yet been updated.

The risk is high because the flaw requires only local authenticated access; a nearby attacker with valid credentials can log into the administration interface and upload the malicious configuration file to trigger the overflow. The EPSS score is not available, and the vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog, but the high CVSS rating and limited authentication requirements still present a significant exploitation opportunity.