Vulnerability
CVE-2023-39780 — ASUS RT-AX55 Routers OS Command Injection Vulnerability
Exploited in the wild 1 story · 1 outlet
Impacted if
ASUS RT-AX55 Routers
CISA Known Exploited Vulnerabilities
Added on 2025-06-02, federal remediation due 2025-06-23. ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
Malicious VPN config files can let attackers run commands on Asus routers
Tom's Hardware
Semiconductors
A “crafted VPN client configuration file” uploaded by the user or a logged-in attacker via an Asus router’s web management interface can allow an adversary to “execute arbitrary commands,” a critical security risk the company has acted to…