CVE-2018-14714

High

9.8/10

Summary

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

References

Advisory Timeline

Published May 13, 2019

CVE-2018-14714

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS