CVE-2023-38033 (published 2023-09-07T06:42:16.805Z)

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.


Affected products: Vendor: ASUS
Product: RT-AC86U
Versions: 3.0.0.4.386.51529