CVEvulnerability

CVE-2014-7270

6.8 MEDIUM Published 2015-02-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected configurations

• asus rt-n66u firmware (<= 3.0.0.4.376.3715) • asus rt-n66u • asus rt-n56u firmware (<= 3.0.0.4.376.3715) • asus rt-n56u • asus rt-ac87u firmware (<= 3.0.0.4.378.3754) • asus rt-ac87u • asus rt-ac68u firmware (<= 3.0.0.4.376.3715) • asus rt-ac68u • asus rt-ac56s firmware (<= 3.0.0.4.376.3715) • asus rt-ac56s

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References