PT-2017-18600 · Asus · Asus Rt-Ac+1

Published

2017-05-10

·

Updated

2017-05-16

·

CVE-2017-8878

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ASUS RT-AC* and RT-N* devices with firmware prior to 3.0.0.4.380.7378
Description The issue allows remote authenticated users to discover the Wi-Fi password via the WPS info.xml file.
Recommendations For ASUS RT-AC* and RT-N* devices with firmware prior to 3.0.0.4.380.7378, update the firmware to version 3.0.0.4.380.7378 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8878

Affected Products

Asus Rt-Ac
Asus Rt-N