← CVE Intelligence

CVE-2023-41346

ASUS RT-AX55 - command injection - 2 PUBLISHED

Description (CNA)

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Affected (CNA)

Vendor / productVersions
ASUS / RT-AX55affected 3.0.0.4.386.51598

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.