Vulnerabilities > Asus > Asmb8 Ikvm Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-02-26 CVE-2023-26602 Command Injection vulnerability in Asus Asmb8-Ikvm Firmware 1.14.51
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.
network
low complexity
asus CWE-77
critical
9.8