ASUS ASMB8 iKVM 1.14.51 SNMP Remote Root | allinfosecnews.com

Feb. 27, 2023, 3:28 p.m. |

Packet Storm packetstormsecurity.com

ASUS ASMB8 iKVM firmware versions 1.14.51 and below suffers from a flaw where SNMPv2 can be used with write access to introduce arbitrary extensions to achieve remote code execution as root. The researchers also discovered a hardcoded administrative account.

access account asus code code execution extensions firmware flaw hardcoded remote code remote code execution researchers root snmp

More from packetstormsecurity.com / Packet Storm

Ubuntu Security Notice USN-6770-1 2 days, 10 hours ago | packetstormsecurity.com

apache discovery fixes handling +13

Ubuntu Security Notice USN-6769-1 2 days, 10 hours ago | packetstormsecurity.com

attacker configuration default denial of service +15

Red Hat Security Advisory 2024-2799-03 2 days, 10 hours ago | packetstormsecurity.com

advisory buffer buffer overflow code +11

Red Hat Security Advisory 2024-2793-03 2 days, 10 hours ago | packetstormsecurity.com

advisory denial of service enterprise linux +7

Red Hat Security Advisory 2024-2705-03 2 days, 10 hours ago | packetstormsecurity.com

advisory build quarkus red hat +3

Red Hat Security Advisory 2024-2672-03 2 days, 10 hours ago | packetstormsecurity.com

advisory bugs code code execution +15

Red Hat Security Advisory 2024-2671-03 2 days, 10 hours ago | packetstormsecurity.com

advisory bugs build denial of service +10

Red Hat Security Advisory 2024-2669-03 2 days, 10 hours ago | packetstormsecurity.com

advisory bugs code code execution +13

Red Hat Security Advisory 2024-2668-03 2 days, 10 hours ago | packetstormsecurity.com

advisory bugs container denial of service +13

Digital Security Infrastructure Manager

@ Wizz Air | Budapest, HU, H-1103

View on infosec-jobs.com

Sr. Solution Consultant

@ Highspot | Sydney

View on infosec-jobs.com

Cyber Security Analyst III

@ Love's Travel Stops | Oklahoma City, OK, US, 73120

View on infosec-jobs.com

Lead Security Engineer

@ JPMorgan Chase & Co. | Tampa, FL, United States

View on infosec-jobs.com

GTI Manager of Cybersecurity Operations

@ Grant Thornton | Tulsa, OK, United States

View on infosec-jobs.com

GCP Incident Response Engineer

@ Publicis Groupe | Dallas, Texas, United States

View on infosec-jobs.com