CVE-2013-5948

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
Configurations

Configuration 1 (hide)

cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4561:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4887:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-22 13:06

Updated : 2023-12-10 11:31


NVD link : CVE-2013-5948

Mitre link : CVE-2013-5948

CVE.ORG link : CVE-2013-5948


JSON object : View

Products Affected

asus

  • rt-ac68u
  • rt-ac68u_firmware

t-mobile

  • tm-ac1900
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')