ASUS Router: command injection

Improper Neutralization of Special

Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request

Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in

administrator into visiting a phishing website, causing the router to execute

arbitrary commands with root privileges.

Refer to the '

Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.