Impacted if
Not known yet — the vendor's record and the NVD are being read.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
Malicious VPN config files can let attackers run commands on Asus routers
Tom's Hardware
Semiconductors
A “crafted VPN client configuration file” uploaded by the user or a logged-in attacker via an Asus router’s web management interface can allow an adversary to “execute arbitrary commands,” a critical security risk the company has acted to…