Cross site request forgery (csrf)

2020-03-2001:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.

CPENameOperatorVersion
asuswrteq3.0.0.4.384.20308

CPE	Name	Operator	Version
	asuswrt	eq	3.0.0.4.384.20308

References

starlabs.sg/advisories/18-20333/