CVE-2024-1655CWE-78

ASUS WiFi Router - OS Command Injection

High · published April 15, 2024

CVSS v3.1
8.8
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02025 · 80.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-04-15T04:01Z
EPSS history
Timeline
  • 15 APR 04:01Z
    ASUS WiFi Router - OS Command Injection
    cvelistv5