CVE-2013-5948

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-04-22 · updated 2026-06-16
Weakness: CWE-78

Description

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).

Affected products

ASUS RT-AC68U: all versions
ASUS Japan Inc. RT-AC68U: 3.0.0.4.374.4755, 3.0.0.4.374_4561, 3.0.0.4.374_4887
T-Mobile Tm-Ac1900: 3.0.0.4.376_3169

References

http://seclists.org/fulldisclosure/2014/Apr/59
http://seclists.org/fulldisclosure/2014/Apr/66
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
https://support.t-mobile.com/docs/DOC-21994
http://seclists.org/fulldisclosure/2014/Apr/59
http://seclists.org/fulldisclosure/2014/Apr/66
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
https://support.t-mobile.com/docs/DOC-21994

Get alerted when CVE-2013-5948 or the next vulnerability affects your stack