Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2023-41346

CVSS 3.1
8.8 high
EPSS
1%p66
Published
·
Modified
Analyze CVE-2023-41346 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Vendors
asus
Products
rt-ax55 firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

2 stories