PT-2017-18599 · Asus · Asus Rt-Ac+1

Publicado

2017-05-10

·

Atualizado

2017-05-16

·

CVE-2017-8877

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378
Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID.
Recommendations For ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378, update the firmware to a version later than 3.0.0.4.380.7378 to resolve the issue.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-8877

Produtos afetados

Asus Rt-Ac
Asus Rt-N