KLA10495 Multiple vulnerabilities in Asus RT-G32 router

Multiple serious vulnerabilities have been found in Asus RT-G32. Malicious users can exploit these vulnerabilities to inject arbitrary code or hijack administrator authentication. Multiple XSS and CSRF vulnerabilities can be exploited remotely via vectors related to start_apply.htm

Original advisories

Related products

Asus-RT-G32-router

CVE list

CVE-2015-2681 warning

CVE-2015-2676 high

Solution

Update firmware

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Asus RT-G32 routers with firmware versions 2.0.2.6 and 2.0.3.2