CVE-2018-14714
CRITICALASUS RT-AC3200 <3.0.0.4.382.50010 - Command Injection
Title source: llmDescription
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.
Exploits (4)
Scores
CVSS v3
9.8
EPSS
0.8102
EPSS Percentile
99.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
asus/rt-ac3200_firmware
3.0.0.4.382.50010
Published
May 13, 2019
Tracked Since
Feb 18, 2026