ASUS Routers Improper Certificate Validation and Integrity Check Vulnerability Allowing Remote Command Execution

A vulnerability in certain ASUS router models, related to improper validation of integrity check values and certificates, enables a remote man-in-the-middle (MITM) attacker to make the router download and execute arbitrary commands from a spoofed server. This issue affects ASUS routers running firmware versions 3.0.0.4_386 series, 3.0.0.4_388 series, and 3.0.0.6_102 series.

Impact

Exploitation of this vulnerability allows for remote command execution on the affected router.

Remediation

Users are advised to update to the latest ASUS router firmware. Instructions for updating can be found on the ASUS Support page.