Forum

CVE-2023-38033 - ASUS RT-AC86U

Zitat

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.

References
https://www.twcert.org.tw/tw/cp-132-7350-ded5e-1.html