CVE-2023-41346: ASUS RT-AX55 Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Affected products

• ASUS RT-AX55 Firmware: version 3.0.0.4.386.51598 only

Published 2023-11-03. Last modified 2026-06-17.