EUVD-2017-4162

Malware in sbrugna...

ASUS DSL-N10S Cross-Site Request Forgery Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site request forgery vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to perform unauthorized operations...

ASUS DSL-N10S Cross-Site Scripting Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

ASUS DSL-N10S Elevation of Privilege Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

PT-2017-12594

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue allows a normal user to escalate their privileges, enabling them to perform administrative actions. This is possible due to the lack of proper mapping of users with their respective...

PT-2017-12595

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For version 2.1.16 APAC, update to a newer version that contains a fix for this issue...

CVE-2017-12593: Cross-Site Request Forgery (CSRF)

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591: Improper Neutralization of Input During Web Page Generation

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

PT-2017-12593

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue concerns reflected and stored cross-site scripting. It is demonstrated by the snmpSysName parameter. Recommendations For version 2.1.16 APAC, consider restricting access to the snmpSysNam...

CVE-2017-12592: Undefined Security Weakness

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...