CVE-2023-35086-POC

CVE-2023-35086-POC 2023년 7월 25일, Altin tin-z, github.com/tin-z 간단한 설명 ASUS RT-AX56U V2 및 RT-AC86U 라우터 펌웨어각각 3.0.0.4.38650460 및 3.0.0.438651529 버전 이하는 httpd 서비스의 detwan.cgi 함수에 format string 취약점이 있어, 공격자가 악의적인 데이터를 구성하면 코드 실행을 유발할 수 있습니다. 이 취약점은 httpd 서비스를 사용하는 다른 ASUS 장치에도 영향을 줍니다. 자세한 내용은 여기에서...

EUVD-2023-42971

Malicious code in bioql PyPI...

EUVD-2023-41860

Malicious code in bioql PyPI...

EUVD-2022-30258

Malicious code in bioql PyPI...

EUVD-2023-41859

Malicious code in bioql PyPI...

EUVD-2023-32345

Malicious code in bioql PyPI...

EUVD-2023-42970

Malicious code in bioql PyPI...

EUVD-2023-41858

Malicious code in bioql PyPI...

PT-2023-7408

Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in the affected devices has a vulnerability due to insufficient filtering of special characters within i...

PT-2023-7411

Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in the ASUS RT-AX55 and RT-AC86U routers has a vulnerability due to insufficient filtering of special...

PT-2023-7410

Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in ASUS routers has a flaw due to inadequate filtering of special characters within the token-generated...

PT-2023-7409

Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The vulnerability exists in the authentication-related function of the router's software due to insufficient filtering of special characters...

CVE-2023-39237

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-38032

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-39236

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-38033

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-39237

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-39236

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

Command injection

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-39237 ASUS RT-AC86U - Command injection vulnerability - 5

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...