ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS…
| Vendor | Product | Versions |
|---|---|---|
| ASUS | ExpertWiFi | 0 |
| ASUS | RT | AX55 — 0 |
| ASUS | RT | AX58U — 0 |
| ASUS | RT | AC67U — 0 |
| ASUS | RT | AC68R — 0 |
| ASUS | RT | AC68U — 0 |
| ASUS | RT | AX86 Series — 0 |
| ASUS | RT | AC86U — 0 |
| ASUS | RT | AX88U — 0 |
| ASUS | RT | AX3000 — 0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.