Skip to content
OpenAdvisories
High · 8.8 CVE-2023-41345 EUVD-2023-45848GHSA-33x3-9w3j-2vw6

ASUS RT-AX55 - command injection - 1

Published Nov 3, 2023 · Updated Sep 6, 2024 · Assigned by twcert

Description

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.

Affected products

VendorProductAffectedFixed
ASUS RT-AX55 3.0.0.4.386.51598 —

References