PT-2023-7246 · Asus · Asus Rt-Ac87U
CVSS v2.0
9.4
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
ASUS RT-AC87U all versions
Description
An improper access control issue exists, related to the implementation of the TFTP protocol, allowing an attacker to read or write files not intended for access. This can be achieved by connecting to the target device via TFTP. The vulnerability is associated with insufficient access control, enabling a remote attacker to access, modify, or delete files.
Recommendations
For all versions of ASUS RT-AC87U, consider disabling TFTP access as a temporary workaround until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Asus Rt-Ac87U