ASUS WiFi Routers Vulnerable to OS Command Injection Attacks
CVE-2024-1655
8.8HIGH
Summary
ASUS WiFi routers are susceptible to an OS Command Injection vulnerability that enables an authenticated remote attacker to execute arbitrary system commands. This is achieved by sending specially crafted requests that exploit this security weakness. The vulnerability poses a significant risk to users as it allows for unauthorized access to the system, potentially leading to further exploitation of the devices.
Affected Version(s)
ExpertWiFi EBM63 earlier < 3.0.0.6.102_32645
ExpertWiFi EBM68 earlier < 3.0.0.6.102_44384
RT-AX57 Go earlier < 3.0.0.6.102_22188
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved