VulnCheck KEV: CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

ASUS RT-AC * and RT-N * Information Disclosure Vulnerability

ASUS RT-AC and RT-N are two router products. An information disclosure vulnerability exists in ASUS RT-AC and RT-N firmware prior to 3.0.0.4.380.7378. An attacker can exploit the vulnerability to obtain sensitive information...

Cross site request forgery (csrf)

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

Information disclosure

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

Default credentials

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5891

CVE-2017-5891 covers CSRF vulnerabilities in ASUS RT-AC* and RT-N* routers prior to firmware 3.0.0.4.380.7378, enabling login and settings changes via the router’s web interface from an attacker-controlled site. Affected models include RT-AC55U/56R/56S/56U/66U/66R/66W/66U family, RT-AC68K/R/U var...

CVE-2017-5892

ASUS RT-AC* and RT-N* routers with firmware older than 3.0.0.4.380.7378 expose a JSONP information-disclosure flaw that can reveal router data such as a network map. The vulnerability is covered by CVE-2017-5892. Most CSRF-related issues were fixed in firmware 3.0.0.4.380.7378; the JSONP informat...

CVE-2017-8877

ASUS RT-AC * and RT-N * router devices are affected by a JSONP Information Disclosure vulnerability in firmware versions through 3.0.0.4.380.7378 . An attacker can exploit this flaw to obtain sensitive information, such as the SSID . No specific exploit details or remediation steps are provided i...

CVE-2017-8878

This entry covers ASUS RT-AC* and RT-N* routers with firmware prior to 3.0.0.4.380.7378. It describes an information-disclosure vulnerability where remote authenticated users can obtain the Wi-Fi password via WPS_info.xml. Impact is partial confidentiality (password exposure) with no integrity or...

PT-2017-18600

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows remote authenticated users to discover the Wi-Fi password via the WPS info.xml file. Recommendations For ASUS RT-AC and RT-N devices with firmware...

CVE-2017-8878: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-8877: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

CVE-2017-5891: Cross-Site Request Forgery (CSRF)

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

PT-2017-16740

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows JSONP information disclosure, which can include details such as a network map. Recommendations For ASUS RT-AC and RT-N devices with firmware prior...

CVE-2017-5892: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

PT-2017-16739

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue affects the login page and save settings functionality, allowing for CSRF attacks. Recommendations For ASUS RT-AC and RT-N devices with firmware prior to...

PT-2017-18599

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID. Recommendations For ASUS RT-AC and RT-N devices with firmware throu...