CVE-2020-35219

Name of the Vulnerable Software and Affected Versions: ASUS DSL-N17U modem version 1.1.0.2

Description: The issue allows attackers to access the admin interface without authentication by changing the admin password. This is achieved through a POST request to "Advanced System Content.asp" with specific substrings, including uiViewTools username, uiViewTools Password, and uiViewTools PasswordConfirm.

Recommendations: For version 1.1.0.2, as a temporary workaround, consider restricting access to the "Advanced System Content.asp" endpoint until a patch is available. Avoid using the uiViewTools username, uiViewTools Password, and uiViewTools PasswordConfirm substrings in the affected POST request until the issue is resolved.