PT-2018-8986 · Asus · Wl-330Nul

Masashi Sakai · Publicado 2018-09-07 · Atualizado 2018-10-30 · CVE-2018-0647

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WL-330NUL Firmware versions prior to 3.0.0.46

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Recommendations For versions prior to 3.0.0.46, update to version 3.0.0.46 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-0647

Produtos afetados

Wl-330Nul

Referências · 4

• https://asus.com/us/Networking/WL330NUL/HelpDesk_BIOS · Nota
• http://jvn.jp/en/jp/JVN71329812/index.html · Nota
• https://osv.dev/vulnerability/CVE-2018-0647 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0647 · Nota de Segurança