EUVD-2017-4162

Malware in sbrugna...

ASUS DSL-N10S Cross-Site Request Forgery Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site request forgery vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to perform unauthorized operations...

ASUS DSL-N10S Cross-Site Scripting Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

ASUS DSL-N10S Elevation of Privilege Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

Cross site request forgery (csrf)

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

Cross site scripting

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

Privilege escalation

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12591

CVE-2017-12591 affects ASUS DSL-N10S V2.1.16_APAC. The vulnerability is a cross‑site scripting (XSS) flaw in the snmpSysName parameter, allowing reflected and stored XSS on the device. Root cause: improper handling of the snmpSysName input. Impact is described as XSS with low to medium overall se...

CVE-2017-12592

The vulnerability CVE-2017-12592 affects ASUS DSL-N10S devices (V2.1.16_APAC). Affected component is the device’s privilege model, where there is no mapping of users to privileges, enabling a normal user to escalate privileges and perform administrative actions. The root cause per the CNVD entry ...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12593

Affected product : ASUS DSL-N10S V2.1.16_APAC. Vulnerability : Cross‑Site Request Forgery (CSRF) in the device. Root cause/condition : Exploitation to induce unauthorized operations by a remote attacker. Impact : Confidentiality/Integrity/Availability implications described as high in CVSS metric...

PT-2017-12594

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue allows a normal user to escalate their privileges, enabling them to perform administrative actions. This is possible due to the lack of proper mapping of users with their respective...

PT-2017-12593

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue concerns reflected and stored cross-site scripting. It is demonstrated by the snmpSysName parameter. Recommendations For version 2.1.16 APAC, consider restricting access to the snmpSysNam...

PT-2017-12595

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For version 2.1.16 APAC, update to a newer version that contains a fix for this issue...