Authentication flaw

2013-10-0510:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.6%

JSON

qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request.

CPENameOperatorVersion
rt-n10e_firmwarele2.0.0.24
rt-n10e_firmwareeq2.0.0.7
rt-n10e_firmwareeq2.0.0.10
rt-n10e_firmwareeq2.0.0.16
rt-n10e_firmwareeq2.0.0.19
rt-n10e_firmwareeq2.0.0.20

Name	Operator	Version
rt-n10e_firmware	le	2.0.0.24
rt-n10e_firmware	eq	2.0.0.7
rt-n10e_firmware	eq	2.0.0.10
rt-n10e_firmware	eq	2.0.0.16
rt-n10e_firmware	eq	2.0.0.19
rt-n10e_firmware	eq	2.0.0.20

References

www.kb.cert.org/vuls/id/984366