This vulnerability involves improper neutralization of special elements in SQL commands within the web management interface of some ASUS routers. An authenticated remote attacker can craft requests that bypass input validation, leading to unauthorized disclosure of confidential information stored in the device's database. The CVSS 4.0 vector indicates network attack vector, high attack complexity, and high vulnerability conditions, with no privileges required beyond authenticated user access. No official remediation or patch information is currently available.

An authenticated remote user can exploit this SQL Injection vulnerability to disclose confidential information from the router's database. This could lead to exposure of sensitive configuration or user data. However, exploitation requires authentication and has high attack complexity, limiting the ease of exploitation.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until an official fix is released, restrict access to the router's management interface to trusted users only and monitor for unusual activity. Follow ASUS advisories for updates.