critical9.8Public exploit code
CVE-2023-26602
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for N…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE)2025-04-16 · local · hardware
Impact
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Asmb8-Ikvm Firmware | through 1.14.51 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html
- http://seclists.org/fulldisclosure/2023/Feb/15
- https://nwsec.de/NWSSA-002-2023.txt
- http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html
- http://seclists.org/fulldisclosure/2023/Feb/15
- https://nwsec.de/NWSSA-002-2023.txt