CVE-2023-39780

creationtimestamp| type| source ---|---|--- 2023-09-11 22:27:52+00:00| seen| https://t.me/cibsecurity/70228 2025-05-28 13:22:26+00:00| seen| https://mastodon.social/users/hrbrmstr/statuses/114585668337631439 2025-05-28 13:22:40+00:00| seen| https://bsky.app/profile/hrbrmstr.dev/post/3lqacdnwi5f2e...

CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar “token-generated module” issue, see CVE-2023-41345; for the similar “token-refresh module” issue, see CVE-2023-41346; for the...

CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the...

CVE-2023-39780

CVE-2023-39780 affects ASUS RT‑AX55 devices (firmware 3.0.0.4.386.51598) where an authenticated attacker can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. The CVSSv3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Require...