CVE-2024-31162CWE-78

ASUS Download Master - OS Command Injection

High · published June 14, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-06-14T06:35Z
EPSS history
Timeline
  • 14 JUN 06:35Z
    ASUS Download Master - OS Command Injection
    cvelistv5