virus logo Intrusion Prevention

AsusWRT.Routers.Load_script.Hook.Command.Injection

description-logoDescription

This indicates an attack attempt against a Command Injection vulnerability in ASUS RT-AC3200 router and devices running ASUSWRT.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker may be able to exploit this to execute arbitrary commands within the context of the application, via a crafted HTTP request.

affected-products-logoAffected Products

ASUS RT-AC3200 router and devices running ASUSWRT.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Upgrade firmware to revision 3.0.0.4.384.32738 or newer.
https://www.asus.com/support/

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-06-06 14.627 Severity:medium:critical
2019-02-01 14.540 Default_action:pass:drop
2019-01-16 14.524

References

https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8
ID 47336
Created Jan 16, 2019
Updated Jun 05, 2019
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2018-14714
Exploit Prediction Score 65.08%
Default Action drop
Active
Affected OS Linux
Affected App Other