TwcertVULNRICHMENT:CVE-2024-1655CVE-2024-1655 ASUS WiFi Router - OS Command Injection
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.
CNA Affected
[
{
"defaultStatus": "unaffected",
"modules": [
"firmware"
],
"product": "ExpertWiFi EBM63",
"vendor": "ASUS",
"versions": [
{
"lessThan": "3.0.0.6.102_32645",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"firmware"
],
"product": "ExpertWiFi EBM68",
"vendor": "ASUS",
"versions": [
{
"lessThan": "3.0.0.6.102_44384",
"status": "affected",
"version": "earlier ",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"firmware"
],
"product": "RT-AX57 Go",
"vendor": "ASUS",
"versions": [
{
"lessThan": "3.0.0.6.102_22188",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
}
]Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%