Unscored severity · published Feb 1, 2015
CVE-2014-7270
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rt-ac56s · Asus
All versions, or not specified · source: NVD
RF
Rt-ac56s Firmware · Asus
through 3.0.0.4.376.3715 · source: NVD
RT
Rt-ac68u · Asus
All versions, or not specified · source: NVD
RF
Rt-ac68u Firmware · Asus
through 3.0.0.4.376.3715 · source: NVD
RT
Rt-ac87u · Asus
All versions, or not specified · source: NVD
RF
Rt-ac87u Firmware · Asus
through 3.0.0.4.378.3754 · source: NVD
RT
Rt-n56u · Asus
All versions, or not specified · source: NVD
RF
Rt-n56u Firmware · Asus
through 3.0.0.4.376.3715 · source: NVD
RT
Rt-n66u · Asus
All versions, or not specified · source: NVD
RF
Rt-n66u Firmware · Asus
through 3.0.0.4.376.3715 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7270
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7270
Vendor Advisory
http://jvn.jp/en/jp/JVN32631078/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000012
Vendor Advisory
http://www.asus.com/jp/News/PNzPd7vkXtrKWXHR
More from Rt-ac56s
–
CVE-2014-7269
ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware…