CVE-2017-6549

High

Published: 09/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-6549 describes a session hijack vulnerability in ASUS routers that allows remote attackers to steal any active admin session. This affects multiple router models with specific firmware versions.

Risk Assessment

Hijacking an admin session can lead to unauthorized access to router settings, posing a serious security threat to the organization's network.

Recommendation

It is recommended to update the router firmware to the latest version to mitigate this vulnerability and secure access to the admin panel.

Other vulnerabilities in Routery ASUS: RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, RT-AC750 oraz oprogramowanie Asuswrt-Merlin.

CVE-2017-6548Critical
Buffer overflows in the networkmap function on ASUS RT-N56U, RT-N66U, RT-AC66U, and other routers allow remote attackers to execute arbitrary code. The issue affects routers with firmware versions prior to 3.0.0.4.380.7378 and other listed models.

Original NVD description (English source)

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers.