high8.5Public exploit code
CVE-2013-5948
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Asus RT56U 3.0.0.4.360 - Remote Command Injection2013-06-07 · webapps · hardware
Impact
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| T-Mobile | Tm-Ac1900 | Version 3.0.0.4.376_3169 |
| Asus | Rt-Ac68u Firmware | Versions 3.0.0.4.374.4755, 3.0.0.4.374_4561, 3.0.0.4.374_4887 |
| Asus | Rt-Ac68u | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Apr/59
- http://seclists.org/fulldisclosure/2014/Apr/66
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994
- http://seclists.org/fulldisclosure/2014/Apr/59
- http://seclists.org/fulldisclosure/2014/Apr/66
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994