CVE-2020-23648

CVE-2020-23648 affects Asus RT-N12E with firmware 2.0.0.39. The root cause is an incorrect access control allowing an attacker to change the administrator password via system.asp and start_apply.htm without authentication. Documented impact is unauthorized admin access (credential modification), ...