CVE-2023-28702 (published 2023-06-02T00:00:00)
ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.
Affected products: Vendor: ASUS
Product: RT-AC86U
Versions: 3.0.0.4.386.51255