CVEvulnerability
CVE-2013-7293
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-16, CWE-284
Description
The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traffic by controlling the server associated with that hostname.
Affected configurations
• asus wl-330nul
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.kb.cert.org/vuls/id/191750 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/64799 www.securityfocus.com
- http://www.kb.cert.org/vuls/id/191750 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/64799 www.securityfocus.com