high8.8
CVE-2023-41346
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module.
Impact
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Rt-Ax55 Firmware | Version 3.0.0.4.386.51598 |