Description
Improper
neutralization of special elements used in an OS command in certain
ASUS Router firmware
allows an unauthenticated nearby user to trigger a chain of
actions—unauthenticated queries, identifier guessing, credential overwriting,
and command injection—resulting in the execution of arbitrary commands with
root privileges.
Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | Router firmware | 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series | — |