Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41346

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Published

2023-11-03T05:15:29.733

Last Modified

2024-11-21T08:21:07.177

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System asus rt-ax55_firmware 3.0.0.4.386.51598 Yes
Hardware asus rt-ax55 - No
References