CVE-2013-5948
Published Apr 22, 2014
Last updated 8 years ago
Overview
- Description
- The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 8.5
- Impact score
- 10
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-78
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "919D9673-1FCA-431D-9F30-643AAEFAC1DA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "536FCD9A-4DBA-465D-8FE8-9E9D815BAB81"
},
{
"criteria": "cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4561:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E3E3F39-1F5A-4AE5-A379-3344BFC1E00D"
},
{
"criteria": "cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4887:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "753D3C81-F078-47B9-8D0B-822EBE9443AE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E23D00B-76E3-438C-8023-3D7CC6AEEE15"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]