Lucene search

MitreCVE-2017-8878

HistoryMay 10, 2017 - 5:29 a.m.

CVE-2017-8878

2017-05-1005:29:00

CWE-200

mitre

web.nvd.nist.gov

cve-2017-8878

asus

rt-ac

rt-n

firmware

vulnerability

wi-fi

password

wps

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPS_info.xml.

Affected configurations

Nvd

Node

asusrt-ac1750_firmwareMatch3.0.0.4.380.7266

AND

asusrt-ac1750Match-

VendorProductVersionCPE
asusrt-ac1750_firmware3.0.0.4.380.7266cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*
asusrt-ac1750-cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asus	rt-ac1750_firmware	3.0.0.4.380.7266	cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:::::::*
asus	rt-ac1750	-	cpe:2.3:h:asus:rt-ac1750:-:::::::*

References

wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

Related for CVE-2017-8878