Improper Administrator IP Validation in Asuswrt Router

CVE-2017-15653

What is CVE-2017-15653?

A vulnerability exists in Asus routers running asuswrt due to improper validation of the administrator's IP address after login. This flaw allows an unauthorized user to exploit the existing administrator session token by utilizing a specific User-Agent string. As a result, an attacker could perform unintended actions on the device, posing significant security risks to users. It is crucial for Asus router users to implement security best practices to mitigate potential threats arising from this vulnerability.

References