CVE-2024-13062CWE-77CWE-912

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution

High · published January 2, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution.

Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Weaknesses
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection'); CWE-912 · Hidden Functionality
Published
2025-01-02T09:09Z
EPSS history
Timeline
  • 02 JAN 09:09Z
    An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution
    cvelistv5