CVE-2014-7269

Published: Feb 1, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Affected (10)

Products: Asus: Rt N66u Firmware, Rt N66u, Rt Ac56s Firmware, Rt Ac56s, Rt Ac68u Firmware, Rt Ac68u, Rt Ac87u Firmware, Rt Ac87u, Rt N56u Firmware, Rt N56u

10 products

Rt N66u Firmware

Rt Ac56s Firmware

Rt Ac68u Firmware

Rt Ac87u Firmware

Rt N56u Firmware

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Asus Rt N66u Firmware	Up to 3.0.0.4.376.3715
Asus Rt N66u	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Asus Rt Ac56s Firmware	Up to 3.0.0.4.376.3715
Asus Rt Ac56s	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Asus Rt Ac68u Firmware	Up to 3.0.0.4.376.3715
Asus Rt Ac68u	All versions

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Asus Rt Ac87u Firmware	Up to 3.0.0.4.378.3754
Asus Rt Ac87u	All versions

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Asus Rt N56u Firmware	Up to 3.0.0.376.3715
Asus Rt N56u	All versions

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (6)

http://jvn.jp/en/jp/JVN77792759/index.html

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000011

Source: vultures@jpcert.or.jp

Vendor Advisory

http://www.asus.com/jp/News/PNzPd7vkXtrKWXHR

Source: vultures@jpcert.or.jp

PatchVendor Advisory

http://jvn.jp/en/jp/JVN77792759/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000011

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.asus.com/jp/News/PNzPd7vkXtrKWXHR

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.