Vulnerability CVE-2024-28328
Published: 2024-04-26

Description:
CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format.

 References:
http://asus.com
https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/CSV-Injection-CVE%E2%80%902024%E2%80%9028328
Copyright 2024, cxsecurity.com

 

Back to Top