ASUS Routers AiCloud Improper Input Insertion Vulnerability Leading to Arbitrary Command Execution

A vulnerability allowing arbitrary command execution has been identified in the AiCloud feature of certain ASUS router models. This issue arises from improper input insertion and affects several different router models. Users can refer to the ASUS Security Advisory for detailed information about the specific models impacted.

Impact

Exploitation of this vulnerability could lead to unauthorized arbitrary command execution on the affected router.

Remediation

ASUS has released a security update for this vulnerability. Users can download the latest firmware from the ASUS Support website or through the ASUS Router App.