Description (CNA)
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ASUS / DSL-N17U | affected earlier before 1.1.2.3_792 |
| ASUS / DSL-N55U_C1 | affected earlier before 1.1.2.3_792 |
| ASUS / DSL-N55U_D1 | affected earlier before 1.1.2.3_792 |
| ASUS / DSL-N66U | affected earlier before 1.1.2.3_792 |
| ASUS / DSL-N12U_C1 | affected earlier before 1.1.2.3_807 |
| ASUS / DSL-N12U_D1 | affected earlier before 1.1.2.3_807 |
| ASUS / DSL-N14U | affected earlier before 1.1.2.3_807 |
| ASUS / DSL-N14U_B1 | affected earlier before 1.1.2.3_807 |
| ASUS / DSL-N16 | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-AC51 | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-AC750 | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-AC52U | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-AC55U | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-AC56U | affected earlier before 1.1.2.3_999 |
| ASUS / DSL-N10_C1 | affected All |
| ASUS / DSL-N10_D1 | affected All |
| ASUS / DSL-N10P_C1 | affected All |
| ASUS / DSL-N12E_C1 | affected All |
| ASUS / DSL-N16P | affected All |
| ASUS / DSL-N16U | affected All |
| ASUS / DSL-AC52 | affected All |
| ASUS / DSL-AC55 | affected All |
CWE
CWE-434
References
- https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html
- https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.