Unscored severity · published Nov 21, 2011
CVE-2011-4497
QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request
–
CVSS
0.5%
EPSS
No
On KEV
Description
QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rt-n56u · Asus
All versions, or not specified · source: NVD
RF
Rt-n56u Firmware · Asus
through 1.0.1.4; 1.0.0.9; 1.0.1.2; 1.0.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4497
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4497
US Government Resource
http://www.kb.cert.org/vuls/id/200814
More from Rt-n56u
–
CVE-2014-7270
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and…
–
CVE-2014-7269
ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware…
–
CVE-2013-4937
Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have…