CVE-2023-28702

published 2023-06-02

CVE-2023-28702: ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ac86u	—	—
asus	rt-ac86u_firmware	—	—

CWE-78