CVE-2024-0401
ASUS OVPN RCE
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.2EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
20 may 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
ASUS · ExpertWiFiASUS · RT-AC67UASUS · RT-AC68RASUS · RT-AC68UASUS · RT-AC86UASUS · RT-AX3000ASUS · RT-AX55ASUS · RT-AX58UASUS · RT-AX86 SeriesASUS · RT-AX88U¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →