Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-1655. PoCs published by lnversed.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2024-1655, an authenticated command injection vulnerability in ASUS ExpertWiFi devices. The exploit crafts a malicious HTTP request to the splash_page_SDN.cgi endpoint, injecting arbitrary commands via a manipulated Content-Disposition header.
Description
Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.
Exploits (1)
This repository contains a functional Python exploit for CVE-2024-1655, an authenticated command injection vulnerability in ASUS ExpertWiFi devices. The exploit crafts a malicious HTTP request to the splash_page_SDN.cgi endpoint, injecting arbitrary commands via a manipulated Content-Disposition header.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H