Unscored severity · published Apr 22, 2014
CVE-2013-5948
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to…
–
CVSS
9.4%
EPSS
No
On KEV
Description
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
Exploitation
Is it being used?
Exploit prediction (EPSS)9.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rt-ac68u · Asus
All versions, or not specified · source: NVD
RF
Rt-ac68u Firmware · Asus
3.0.0.4.374.4755; 3.0.0.4.374_4561; 3.0.0.4.374_4887 · source: NVD
TM
Tm-ac1900 · T-mobile
3.0.0.4.376_3169 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5948
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5948
seclists.org
http://seclists.org/fulldisclosure/2014/Apr/59
Exploit
http://seclists.org/fulldisclosure/2014/Apr/66
support.asus.com
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
support.t-mobile.com
https://support.t-mobile.com/docs/DOC-21994
More from Rt-ac68u
–
CVE-2014-7270
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and…
–
CVE-2014-7269
ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware…
–
CVE-2014-2925
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote…
–
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to…