ASUS RT-AC86U - Command injection vulnerability - 4

CVE-2023-39236

What is CVE-2023-39236?

The ASUS RT-AC86U Traffic Analyzer is susceptible to a command injection vulnerability due to insufficient filtering of special characters. A remote attacker, possessing regular user privileges, may exploit this security flaw to inject malicious commands, leading to unauthorized execution of arbitrary commands. This can result in a system disrupt or termination of essential services, jeopardizing the integrity and availability of network operations. It is crucial for users to apply recommended security measures to mitigate potential exploitation.

References