Dsl-N10S Firmware Security Vulnerabilities

CVE-2017-12591

ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter.

CVE-2017-12592

ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges.

CVE-2017-12593

ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.