PT-2023-7491 · Asus · Asus Rt-Ac86U

CVE-2023-39237

·

Publicado

2023-09-04

·

Atualizado

2023-09-12

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ASUS RT-AC86U (affected versions not specified)
Description The issue exists due to insufficient filtering of special characters in the Traffic Analyzer - Statistic function of the ASUS RT-AC86U Wi-Fi router's firmware. A remote attacker with regular user privileges can exploit this to perform a command injection attack, allowing them to execute arbitrary commands, disrupt the system, or terminate services.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08535
CVE-2023-39237

Produtos afetados

Asus Rt-Ac86U