JSONP Information Disclosure in ASUS RT-AC and RT-N Routers
CVE-2017-8877

6.5MEDIUM

Key Information:

Vendor

Asus
Status
Rt-ac1750 Firmware
Vendor
CVE Published:
10 May 2017

What is CVE-2017-8877?

ASUS RT-AC and RT-N series routers running firmware versions up to 3.0.0.4.380.7378 are susceptible to a JSONP information disclosure vulnerability. This allows attackers to potentially access sensitive information, such as the service set identifier (SSID), which could be used to compromise network security. Users of affected devices should ensure they update their firmware to mitigate this risk.

References

https://wwws.nightwatchcybersecurity.com/2017/05/09/multi...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-8877 : JSONP Information Disclosure in ASUS RT-AC and RT-N Routers