CVE-2023-41345: ASUS RT-AX55 - command injection - 1

Published Nov 3, 2023

Updated

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.

Affected Software

2 affected components

ASUS Rt-ax55 Firmware=3.0.0.4.386.51598

ASUS RT-AX55

Remediation

Information

Update version to 3.0.0.4.386_51948 .

Event History

Nov 3, 2023

CVE Published

via MITRE·04:16 AM

Data Sourced

via MITRE·04:16 AM

RemedyDescriptionSeverityWeakness

Jun 5, 2025

News Published

via ZDNet·01:26 PM

News Published

via ZDNet·01:43 PM

Known Exploited

01:43 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-41345.

What is the severity rating of CVE-2023-41345?

The severity rating of CVE-2023-41345 is 8.8 (high).

What is the affected software for CVE-2023-41345?

The affected software for CVE-2023-41345 is ASUS RT-AX55 firmware version 3.0.0.4.386.51598.

How does the vulnerability CVE-2023-41345 affect the system?

The vulnerability CVE-2023-41345 allows an authenticated remote attacker to perform a Command Injection attack and execute arbitrary commands, potentially disrupting the system.

Is the ASUS RT-AX55 device vulnerable to CVE-2023-41345?

No, the ASUS RT-AX55 device is not vulnerable to CVE-2023-41345.