CVE Catalog

CVE-2024-28325

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.14%

4th percentile - higher than 4% of all known CVEs

Summary

The Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

Risk Assessment

The risk involves potential takeover of the router by a local attacker, leading to network configuration changes, traffic interception, or further attacks on the infrastructure.

Recommendation

It is recommended to immediately update the router firmware to the latest version and change default login credentials. If no patch is available from the vendor, consider replacing the device with a more secure model.

Original NVD description (English source)

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS