Published: 22/04/2014 Updated: 30/06/2016

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 855

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Subscribe to Tm-ac1900

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware prior to 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).

Vulnerable Product	Search on Vulmon	Subscribe to Product
t-mobile tm-ac1900 3.0.0.4.376_3169
asus rt-ac68u_firmware 3.0.0.4.374_4561
asus rt-ac68u_firmware 3.0.0.4.374_4887
asus rt-ac68u_firmware 3.0.0.4.374.4755
asus rt-ac68u -

# Exploit Title: Asus RT56U Remote Command Injection # Date: 05/05/2013 # Exploit Author: drone (@dronesec) # Vendor Homepage: asuscom # Version: <= 3004360 (latest) Device Details: ============== Router information: wwwasuscom/Networking/RTN56U/ Firmware: wwwasuscom/Networking/RTN56U/#support_Download_30 Vulnerability ...

CWE-78 http://seclists.org/fulldisclosure/2014/Apr/59 http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 http://seclists.org/fulldisclosure/2014/Apr/66 https://support.t-mobile.com/docs/DOC-21994 https://nvd.nist.gov https://www.exploit-db.com/exploits/25998/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-5948

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect