CVE-2023-41347

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Score

CVSS 3.1 8.8 High

Status

Modified - twcert@cert.org.tw

Published

2023-11-03

Last modified

2024-09-04

Weaknesses

CWE-78

Affected products

• Rt-ax55 (Asus)
• Rt-ax55 Firmware (Asus)

References

• https://www.twcert.org.tw/tw/cp-132-7498-18012-1.html