CVE-2023-39780highunder attackCWE-78

CVE-2023-39780: high-severity vulnerability in ASUS RT-AX55

Published · Updated

Follow this CVE+ Monitor RT-AX55+ Monitor RT-AX55 Routers

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 40%
from disclosure to weapon
Published on NVDSep 11
CISA KEV+630d
Action required by CISAfederal deadline: 2025-06-23

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

An authenticated attacker can run arbitrary commands on an ASUS RT-AX55 router by sending a specially crafted request to a web interface parameter. This allows complete control over the device.

Technical detail

OS command injection vulnerability in the /start_apply.htm endpoint via the qos_bw_rulelist parameter on ASUS RT-AX55 3.0.0.4.386.51598. Requires prior authentication but allows unauthenticated remote code execution after initial access. Impact includes full device compromise and network control.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the similar "check token module" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
ASUS · RT-AX55
Related CVEs — ASUS RT-AX55

In the same product, most dangerous first.

CVE-2021-37910LOWASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper AuthenticationEPSS 2.1%CVE-2023-41348HIGHASUS RT-AX55 - command injection - 4EPSS 1.7%CVE-2023-41347HIGHASUS RT-AX55 - command injection - 3EPSS 1.7%CVE-2023-41345HIGHASUS RT-AX55 - command injection - 1EPSS 1.7%CVE-2023-41346HIGHASUS RT-AX55 - command injection - 2EPSS 1.6%CVE-2023-39238HIGHASUS RT-AX55、RT-AX56U_V2 - Format String - 1EPSS 1.4%