CVE-2018-14714

Critical · 9.8

CVSS

9.8

EPSS

27.4%

Published

May 13, 2019

CISA due date

—

The record

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed