CSRF Vulnerabilities in ASUS RT-AC and RT-N Series Routers

CVE-2017-5891

What is CVE-2017-5891?

ASUS RT-AC and RT-N series routers exhibit vulnerabilities that allow attackers to exploit Cross-Site Request Forgery (CSRF) on critical functions such as the login page and settings-saving capabilities. If users access a malicious website, an attacker could send unauthorized commands to these routers, potentially resulting in altered settings or unauthorized configuration changes. Users are strongly advised to update their firmware to the latest version to mitigate exposure to these vulnerabilities.

References