Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28702

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.

Published

2023-06-02T11:15:10.510

Last Modified

2024-11-21T07:55:50.027

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System asus rt-ac86u_firmware 3.0.0.4.386.51255 Yes
Hardware asus rt-ac86u - No
References