CVE-2023-26602

CRITICAL

ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-26602 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 11, 2025 · Source: CVE List

Proofs of concept

2

Catalogued exploits

ExploitDBASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE)ExploitDB exploitby ub3rsickNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubD1G17/CVE-2023-26602Repository PoCby D1G170Not analyzed2 files

3.9 KiB

GitHub
PoC details

References

4