CVE Catalog
CVE-2024-28326
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
Incorrect access control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the UART interface.
Risk Assessment
The risk involves potential full device compromise by an attacker with physical access, enabling configuration changes, network traffic interception, or using the router as an entry point into the internal network.
Recommendation
It is recommended to restrict physical access to the routers and apply the latest firmware updates from the manufacturer if security patches are available.
Original NVD description (English source)
Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.