ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAsus Rt Ac86u
HWAsusall versionsAsus Rt Ac86u Firmware
OSAsus3.0.0.4_386_51529
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
Related vulnerabilities
CVE-2023-35087CRITICAL9.8PL ✓same product
Format string RCE w ASUS RT-AX56U V2 i RT-AC86U (AiMesh)
CVE-2018-20334CRITICAL9.8PL ✓same product
Command injection w ASUSWRT przez parametr fb_email — przejęcie kontroli nad routerem
CVE-2018-8826CRITICAL9.8PL ✓same product
RCE w routerach ASUS RT-Series — zdalne wykonanie kodu bez uwierzytelnienia
CVE-2018-9285CRITICAL9.8PL ✓same product
Command injection w routerach ASUS – zdalne wykonanie poleceń OS
CVE-2023-38032HIGH8.8same product
ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remo...