PT-2017-12594 · Asus · Asus Dsl-N10S

Published 2017-08-18 · Updated 2019-10-03 · CVE-2017-12592

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS DSL-N10S version 2.1.16 APAC

Description The issue allows a normal user to escalate their privileges, enabling them to perform administrative actions. This is possible due to the lack of proper mapping of users with their respective privileges.

Recommendations For version 2.1.16 APAC, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2017-12592

Affected Products

Asus Dsl-N10S

References · 3

• 🔥 https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-12592 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12592 · Vendor Advisory