CVE-2018-0647

8.8HIGH

Key Information:

Vendor
Asus Japan Inc.
Status
Wl-330nul
Vendor
CVE Published:
7 September 2018

Summary

Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected Version(s)

WL-330NUL Firmware version prior to 3.0.0.46

References

https://www.asus.com/us/Networking/WL330NUL/HelpDesk_BIOS/
x_refsource_MISC
http://jvn.jp/en/jp/JVN71329812/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.