Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-1655

ASUS WiFi Router - OS Command Injection

Description

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS ExpertWiFi EBM63

Default version status: unaffected

  • earlier to < 3.0.0.6.102_32645affected

ASUS ExpertWiFi EBM68

Default version status: unaffected

  • earlier to < 3.0.0.6.102_44384affected

ASUS RT-AX57 Go

Default version status: unaffected

  • earlier to < 3.0.0.6.102_22188affected

References