CVEブラウザに戻る

CVE-2023-39780

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-11

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the similar "check token module" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348.

Affected Platforms (CPE)

💻

Asus

Rt Ax55 Firmware

= 3.0.0.4.386.51598

References & Advisories

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md

🔗 https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md

関連する脆弱性情報

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...

CVE-2026-645168.8

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCP...

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference Afte...