CVE-2013-3093

Microsoft-style CVE-2013-3093 is an ASUS router CSRF in the web UI that can be abused via forged requests to perform admin actions. Affected devices include RT-N56U, RT-N16, RT-N10U, RT-AC66U, RT-N15U, RT-N53 (firmware families around 3.0.0.4.374.x). The underlying issues combine CSRF with a rela...

ASUS router drive-by code execution via XSS and authentication bypass

ASUS router drive-by code execution via XSS and authentication bypass ===================================================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/asus-router-auth-bypass.txt Overview -------- Various ASUS routers contai...

ASUS Router Authentication Bypass / Cross Site Scripting

ASUS router drive-by code execution via XSS and authentication bypass ===================================================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/asus-router-auth-bypass.txt Overview -------- Various ASUS routers contai...