CVE-2024-1655

published 2024-04-15

CVE-2024-1655: Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by…

Priority P2 65 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
asus	expertwifi_ebm63	>= earlier < 3.0.0.6.102_32645	3.0.0.6.102_32645
asus	expertwifi_ebm68	>= earlier < 3.0.0.6.102_44384	3.0.0.6.102_44384
asus	rt-ax57_go	>= earlier < 3.0.0.6.102_22188	3.0.0.6.102_22188

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78