PT-2013-4515 · Asus · Asus Rt-N10E
Sanket Karalkar
·
Published
2013-10-05
·
Updated
2013-10-07
·
CVE-2013-3610
CVSS v2.0
6.1
Medium
| Vector | AV:A/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ASUS RT-N10E router versions prior to 2.0.0.25
Description
The issue concerns the lack of authentication requirement for the qis/QIS finish.htm page on the ASUS RT-N10E router. This allows remote attackers to discover the administrator password via a direct request to the '/qis/QIS finish.htm' endpoint.
Recommendations
For versions prior to 2.0.0.25, update the firmware to version 2.0.0.25 or later to resolve the issue.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Asus Rt-N10E