CVEvulnerability
CVE-2024-31162
7.2 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html www.twcert.org.tw
- https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html www.twcert.org.tw
- https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html www.twcert.org.tw
- https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html www.twcert.org.tw