ASUS RT-AX55 - command injection - 2

Vulnerability

The vulnerability exists in the token-refresh module of the authentication-related function in ASUS RT-AX55 routers. The module fails to properly filter special characters, allowing command injection. The affected firmware version is 3.0.0.4.386.51598 [1]. An attacker must have valid authentication credentials to exploit this flaw.

Exploitation

An authenticated remote attacker can send specially crafted HTTP requests to the token-refresh endpoint, injecting arbitrary commands into the system [1]. No user interaction is required, and the attack can be carried out over the network.

Impact

Successful exploitation enables the attacker to execute arbitrary commands with system-level privileges. This leads to full compromise of confidentiality, integrity, and availability, including disruption of services or termination of system processes [1].

Mitigation

The vendor has released firmware version 3.0.0.4.386_51948 to address the vulnerability [1]. Users should update their RT-AX55 routers to this fixed version as soon as possible. No alternative workarounds have been disclosed.