CVE-2023-39780
ASUS RT-AX55 Routers OS Command Injection Vulnerability
ASUS RT-AX55 RoutersNetwork & edge
CVSS
8.8HighExploit odds (EPSS)39.5%Chance of exploitation activity in the next 30 days, higher than 98% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Timeline
Description
ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.
Text from CVE List
Affected versions 1
- RT-AX55affected: 3.0.0.4.386.51598CVE List
References 11
- asus.com/content/asus-product-security-advisory/Advisoryvia CISA KEV
- asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55Referencevia CISA KEV
- nvd.nist.gov/vuln/detail/CVE-2023-39780Referencevia CISA KEV
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.mdReferencevia CVE List
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.mdReferencevia CVE List
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.mdReferencevia CVE List
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.mdReferencevia CVE List
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.mdReferencevia CVE List
- github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.mdReferencevia CVE List
- greynoise.io/blog/stealthy-backdoor-campaign-affecting-asus-routersReferencevia CVE List
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-39780Referencevia CVE List