CVE-2017-5891

High

Published: 10/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

ASUS RT-AC* and RT-N* devices with firmware before version 3.0.0.4.380.7378 are vulnerable to CSRF attacks on the login page and while saving settings.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the device settings, potentially leading to configuration changes and device takeover.

Recommendation

It is recommended to update the firmware to version 3.0.0.4.380.7378 or later to mitigate this vulnerability.

Other vulnerabilities in ASUS RT-AC* and RT-N* devices

CVE-2017-5892High
ASUS RT-AC* and RT-N* devices with firmware before version 3.0.0.4.380.7378 allow JSONP Information Disclosure, which may include a network map.

Original NVD description (English source)

ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF.