ASUS RT-AC86U - Command injection vulnerability - 2

CVE-2023-38032

Summary

The ASUS RT-AC86U router is affected by a command injection vulnerability tied to its AiProtection features. This weakness arises from inadequate filtering of special characters, allowing remote attackers with standard user privileges to manipulate input strings. By exploiting this flaw, malicious users can execute arbitrary commands, potentially leading to system disruptions or the termination of critical services on the router.

References