Lucene search
HistoryOct 05, 2013 - 10:55 a.m.
CVE-2013-3610
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
39.6%
qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request.
Affected configurations
Node
asusrt-n10e_firmwareRange≤2.0.0.24
ORasusrt-n10e_firmwareMatch2.0.0.7
ORasusrt-n10e_firmwareMatch2.0.0.10
ORasusrt-n10e_firmwareMatch2.0.0.16
ORasusrt-n10e_firmwareMatch2.0.0.19
ORasusrt-n10e_firmwareMatch2.0.0.20
asusrt-n10eMatch-
References
Related
prion
prion
Authentication flaw
2013-10-05 10:55:00
cve
cve
CVE-2013-3610
2022-10-03 16:14:45
cert
cert
ASUS RT-N10E Wireless Router vulnerable to authentication bypass
2013-10-04 00:00:00
openvas
openvas
threatpost
threatpost
Router Flaw Exposes Sensitive Configuration, Password Info
2013-10-07 14:54:04
cvelist
cvelist
CVE-2013-3610
2022-10-03 16:14:45
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
39.6%
Related for NVD:CVE-2013-3610