CVE-2023-26602

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

• CWE-77

• http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Feb/15Exploit, Mailing List, Third Party Advisory
• https://nwsec.de/NWSSA-002-2023.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Feb/15Exploit, Mailing List, Third Party Advisory
• https://nwsec.de/NWSSA-002-2023.txtExploit, Third Party Advisory

Published

Feb 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26596Improper access control in some Intel(R) Thunderbolt(TM) DCH…2.5
• CVE-2023-26597Controller DoS due to buffer overflow in the handling of a s…7.5
• CVE-2023-26599XSS vulnerability in TripleSign in Tripleplay Platform relea…6.1
• CVE-2023-2660A vulnerability has been found in SourceCodester Online Comp…6.3
• CVE-2023-26600ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plu…6.5
• CVE-2023-26601Zoho ManageEngine ServiceDesk Plus through 14104, Asset Expl…7.5
• CVE-2023-26603JumpCloud Agent before 1.178.0 Creates a Temporary File in a…5.9
• CVE-2023-26604systemd before 247 does not adequately block local privilege…7.8
• CVE-2023-26605In the Linux kernel 6.0.8, there is a use-after-free in inod…7.8
• CVE-2023-26606In the Linux kernel 6.0.8, there is a use-after-free in ntfs…7.8
• CVE-2023-26607In the Linux kernel 6.0.8, there is an out-of-bounds read in…7.1
• CVE-2023-26608SOLDR (System of Orchestration, Lifecycle control, Detection…5.4