CVE-2024-28328: ASUS Rt-n12\+ b1 Firmware

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format.

Affected products

• ASUS Rt-n12\+ b1 Firmware: version 3.0.0.4.380.10931 only

Published 2024-04-26. Last modified 2026-07-09.