CVE-2024-28327

2024-04-2600:00:00

mitre

github.com

asus router

plaintext password

unauthorized access

router settings

local attackers

cve-2024-28327

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings.

References

asus.com

github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/Insecure-Credential-Storage-CVE%E2%80%902024%E2%80%9028327