CVE-2023-38033 — ASUS RT-AC86U - Command injection vulnerability - 3
ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this …
Published: 2023-09-07 · CVSS: 8.8 · CVSS 3.1
ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7