ASUS Routers SQL Injection Vulnerability in Web Management Interface

A SQL injection vulnerability has been identified in the web management interface of certain ASUS router models. This issue allows remote authenticated users to bypass existing input validation and disclose confidential information by sending crafted requests. The vulnerability arises from improper neutralization of special elements used in SQL commands.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of confidential information.

Remediation

Users are advised to update to the latest version of the ASUS router firmware. Instructions for updating can be found on the ASUS Security Advisory page.