Details of VAR-201602-0442

ID

VAR-201602-0442

TITLE

ASUS RT-Series Wireless Router Information Disclosure Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2016-05101

DESCRIPTION

ASUS RT Series Wireless Routers are ASUS RT Series wireless router products. An information disclosure vulnerability exists in ASUS RT Series Wireless Routers running ASUSWRT firmware version 3.0.0.378.9460. An attacker could use this vulnerability to obtain sensitive information

Trust: 1.08

sources: CNVD: CNVD-2016-05101 // CNNVD: CNNVD-201607-475

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2016-05101

AFFECTED PRODUCTS

vendor:

asus

model:

rt-series routers

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2016-05101

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-05101
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2016-05101
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2016-05101

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201607-475

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201607-475

PATCH

title:

Patch for ASUSRT-Series Wireless Router Information Disclosure Vulnerability

url:

https://www.cnvd.org.cn/patchinfo/show/79427

Trust: 0.6

sources: CNVD: CNVD-2016-05101

EXTERNAL IDS

db:	BID	id:	83240	Trust: 1.2
db:	CNVD	id:	CNVD-2016-05101	Trust: 0.6
db:	CNNVD	id:	CNNVD-201607-475	Trust: 0.6

sources: CNVD: CNVD-2016-05101 // CNNVD: CNNVD-201607-475

REFERENCES

url:	http://www.asus.com/	Trust: 0.6
url:	http://www.securityfocus.com/bid/83240	Trust: 0.6

sources: CNVD: CNVD-2016-05101 // CNNVD: CNNVD-201607-475

CREDITS

David Longenecker

Trust: 0.6

sources: CNNVD: CNNVD-201607-475

SOURCES

db:	CNVD	id:	CNVD-2016-05101
db:	CNNVD	id:	CNNVD-201607-475

LAST UPDATE DATE

2022-05-17T02:07:07.772000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-05101	date:	2016-07-21T00:00:00
db:	CNNVD	id:	CNNVD-201607-475	date:	2016-07-18T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-05101	date:	2016-07-21T00:00:00
db:	CNNVD	id:	CNNVD-201607-475	date:	2016-02-07T00:00:00