CVE-2024-1655

ASUS WiFi Router - OS Command Injection

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.

Affected

ASUS · ExpertWiFi EBM63 · ExpertWiFi EBM68 · RT-AX57 Go

CVSS v3.1 CERT

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

2.02% chance of exploitation in the next 30 days, 81st percentile

Published

2024-04-15

Updated

2024-08-01

Proof-of-concept exploits (1)

• lnversed/CVE-2024-16551★ · 2024-05-06

References

• CVE Record
• NVD entry

Related

• CVE-2020-10882
• CVE-2020-8423
• CVE-2023-20025