Back to feed
EUVD-2017-6195 · Published Jan 29, 2018
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp.
Technologies
Asus Dsl-N17UAsus Dsl-N14U FirmwareAsus Dsl-N55U D1Asus Dsl-Ac52U FirmwareAsus Dsl-Ac750 FirmwareAsus Dsl-N10 C1 FirmwareAsus Dsl-N12E C1 FirmwareAsus Dsl-N66U FirmwareAsus Dsl-Ac55U FirmwareAsus Dsl-N14U-B1 FirmwareAsus Dsl-Ac52UAsus Dsl-N16Asus Dsl-N12U C1Asus Dsl-N66UAsus Dsl-N14U-B1Asus Dsl-N16UAsus Dsl-Ac56U FirmwareAsus Dsl-Ac56UAsus Dsl-Ac51 FirmwareAsus Dsl-Ac55UAsus Dsl-N55U C1 FirmwareAsus Dsl-N12U C1 FirmwareAsus Dsl-N55U D1 FirmwareAsus Dsl-N14UAsus Dsl-N10 C1Asus Dsl-Ac51Asus Dsl-N16U FirmwareAsus Dsl-N12E C1Asus Dsl-N55U C1Asus Dsl-N16 FirmwareAsus Dsl-N17U FirmwareAsus Dsl-Ac750
Weaknesses
CWE-287
CVSS scores
- v3.09.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.05.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
