JSONP Information Disclosure in ASUS Network Devices

CVE-2017-5892

Summary

Certain ASUS RT-AC and RT-N series routers with firmware prior to version 3.0.0.4.380.7378 exhibit a vulnerability that allows attackers to exploit JSONP functionality. This exploit facilitates unauthorized information disclosure, including sensitive data such as network maps, potentially compromising the security of the device and the network it protects.

References