Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-39237

ASUS RT-AC86U - Command injection vulnerability - 5

Description

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS RT-AC86U

Default version status: unaffected

  • 3.0.0.4.386.51529affected

References