Cross site request forgery (csrf)

QISwizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request...

CVE-2011-4497

CVE-2011-4497 affects the ASUS RT-N56U router with firmware prior to 1.0.1.4o. The QIS_wizard.htm page permits remote attackers to disclose the administrator password via a flag=detect request. This is an information-disclosure issue (no exploitation details provided in the primary CVE entry). Op...