Description
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | ExpertWiFi | < 3.0.0.6.102_44544 | 3.0.0.6.102_44544 |
| ASUS | RT-AX55 | < 3.0.0.4.386_52303 | 3.0.0.4.386_52303 |
| ASUS | RT-AX58U | < 3.0.0.4.388_24762 | 3.0.0.4.388_24762 |
| ASUS | RT-AC67U | < 3.0.0.4.386_51685 | 3.0.0.4.386_51685 |
| ASUS | RT-AC68R | < 3.0.0.4.386_51685 | 3.0.0.4.386_51685 |
| ASUS | RT-AC68U | < 3.0.0.4.386_51685 | 3.0.0.4.386_51685 |
| ASUS | RT-AX86 Series | < 3.0.0.4.388_24243 | 3.0.0.4.388_24243 |
| ASUS | RT-AC86U | < 3.0.0.4.386_51925 | 3.0.0.4.386_51925 |
| ASUS | RT-AX88U | < 3.0.0.4.388_24209 | 3.0.0.4.388_24209 |
| ASUS | RT-AX3000 | < 3.0.0.4.388_24762 | 3.0.0.4.388_24762 |
References
- https://vulncheck.com/advisories/asus-ovpn-rce third-party-advisory