PT-2018-8986 · Asus · Wl-330Nul

Masashi Sakai · Published 2018-09-07 · Updated 2018-10-30 · CVE-2018-0647

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WL-330NUL Firmware versions prior to 3.0.0.46

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Recommendations For versions prior to 3.0.0.46, update to version 3.0.0.46 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-0647

Affected Products

Wl-330Nul

References · 4

• https://osv.dev/vulnerability/CVE-2018-0647 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0647 · Security Note
• https://asus.com/us/Networking/WL330NUL/HelpDesk_BIOS · Note
• http://jvn.jp/en/jp/JVN71329812/index.html · Note