CVE-2024-31162highCWE-78

CVE-2024-31162: high-severity vulnerability in ASUS Download Master

ASUS Download Master - OS Command Injection

Published · Updated

Follow this CVE+ Monitor Download Master

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.6%
The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
ASUS · Download Master
Related CVEs — ASUS Download Master

In the same product, most dangerous first.

CVE-2024-31163HIGHASUS Download Master - Buffer OverflowEPSS 0.6%CVE-2024-31161HIGHASUS Download Master - Arbitrary File UploadEPSS 0.5%CVE-2024-31160MEDIUMASUS Download Master - Stored XSSEPSS 0.3%CVE-2024-31159MEDIUMASUS Download Master - Reflected XSSEPSS 0.3%