PT-2013-4515 · Asus · Asus Rt-N10E

Sanket Karalkar · Publicado 2013-10-05 · Atualizado 2013-10-07 · CVE-2013-3610

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-N10E router versions prior to 2.0.0.25

Description The issue concerns the lack of authentication requirement for the qis/QIS finish.htm page on the ASUS RT-N10E router. This allows remote attackers to discover the administrator password via a direct request to the '/qis/QIS finish.htm' endpoint.

Recommendations For versions prior to 2.0.0.25, update the firmware to version 2.0.0.25 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-3610

Produtos afetados

Asus Rt-N10E

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3610 · Nota de Segurança
• http://kb.cert.org/vuls/id/984366 · Nota