Published: 26/02/2023 Updated: 07/03/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

ASUS ASMB8 iKVM firmware up to and including 1.14.51 allows remote malicious users to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
asus asmb8-ikvm firmware

ASUS ASMB8 iKVM firmware versions 11451 and below suffers from a flaw where SNMPv2 can be used with write access to introduce arbitrary extensions to achieve remote code execution as root The researchers also discovered a hardcoded administrative account ...

Exploit information for CVE-2023-26602

Exploit information for CVE-2023-26602 DISCLAIMER: For education, research, ethical hacking and professional pentesting ONLY

CWE-77 https://nwsec.de/NWSSA-002-2023.txt http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html http://seclists.org/fulldisclosure/2023/Feb/15 https://nvd.nist.gov https://github.com/D1G17/CVE-2023-26602 https://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-26602

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect