ASUS RT-AC86U - Command injection vulnerability - 1

CVE-2023-38031

Summary

The ASUS RT-AC86U router's Adaptive QoS Web History function is vulnerable due to insufficient filtering of special characters. This oversight allows a remote attacker with standard user privileges to exploit the vulnerability. Through command injection tactics, the attacker can execute arbitrary commands, which may lead to disruption of system functionality or termination of critical services, posing a significant threat to network integrity.

References