CVE-2023-41348: ASUS RT-AX55 - command injection - 4

Published Nov 3, 2023

Updated

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Affected Software

2 affected components

ASUS Rt-ax55 Firmware=3.0.0.4.386.51598

ASUS RT-AX55

Remediation

Information

Update version to 3.0.0.4.386_51948 .

Event History

Nov 3, 2023

CVE Published

via MITRE·04:32 AM

Data Sourced

via MITRE·04:32 AM

RemedyDescriptionSeverityWeakness

Jun 5, 2025

News Published

via ZDNet·01:26 PM

News Published

via ZDNet·01:43 PM

Known Exploited

01:43 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for ASUS RT-AX55?

The vulnerability ID for ASUS RT-AX55 is CVE-2023-41348.

What is the severity of CVE-2023-41348?

The severity of CVE-2023-41348 is high with a CVSS score of 8.8.

What software versions are affected by CVE-2023-41348?

The firmware version 3.0.0.4.386.51598 of ASUS RT-AX55 is affected by CVE-2023-41348.

What is the impact of CVE-2023-41348?

CVE-2023-41348 allows an authenticated remote attacker to perform a Command Injection attack, execute arbitrary commands, and potentially disrupt the system.

Is ASUS RT-AX55 vulnerable to CVE-2023-41348?

Yes, ASUS RT-AX55 with firmware version 3.0.0.4.386.51598 is vulnerable to CVE-2023-41348.