Information Disclosure Vulnerability in RT-AC88U by ASUS

CVE-2020-29656

Summary

An information disclosure vulnerability affects the ASUS RT-AC88U Download Master service prior to version 3.1.0.108. This vulnerability allows unauthorized access to specific functionalities through direct access to a URL. By exploiting this flaw, attackers can access sensitive data and expose it to potential misuse. With a known public exploit making the attack relatively straightforward, it’s critical for users to update their firmware to the latest version to mitigate this risk.

References