PT-2015-3920
CVE-2014-7269
·
Published
2015-02-01
·
Updated
2015-02-04
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ASUS RT-AC87U routers versions 3.0.0.4.378.3754 and earlier
ASUS RT-AC68U routers versions 3.0.0.4.376.3715 and earlier
ASUS RT-AC56S routers versions 3.0.0.4.376.3715 and earlier
ASUS RT-N66U routers versions 3.0.0.4.376.3715 and earlier
ASUS RT-N56U routers versions 3.0.0.4.376.3715 and earlier
Description
The issue allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Recommendations
For ASUS RT-AC87U routers versions 3.0.0.4.378.3754 and earlier, update the firmware to a version later than 3.0.0.4.378.3754.
For ASUS RT-AC68U routers versions 3.0.0.4.376.3715 and earlier, update the firmware to a version later than 3.0.0.4.376.3715.
For ASUS RT-AC56S routers versions 3.0.0.4.376.3715 and earlier, update the firmware to a version later than 3.0.0.4.376.3715.
For ASUS RT-N66U routers versions 3.0.0.4.376.3715 and earlier, update the firmware to a version later than 3.0.0.4.376.3715.
For ASUS RT-N56U routers versions 3.0.0.4.376.3715 and earlier, update the firmware to a version later than 3.0.0.4.376.3715.
Found an issue in the description? Have something to add? Feel free to write us 👾