Vulnerabilities > CVE-2023-28702 - Unspecified vulnerability in Asus Rt-Ac86U Firmware 3.0.0.4.386.51255

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN

Summary

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.

Vulnerable Configurations

Part Description Count
OS
Asus
1
Hardware
Asus
1