CVE-2023-39237

published 2023-09-07

CVE-2023-39237: ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ac86u	—	—
asus	rt-ac86u_firmware	—	—

CWE-78