CVE-2016-6557
—CVSS 3.0
8.8 high
EPSS
<1%p56
Published
()
Modified
Description
In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.
- Vendors
- asus
- Products
- rp-ac52 firmware, ea-n66 firmware, rp-n12 firmware, rp-n14 firmware, rp-n53 firmware, rp-ac56 firmware, wmp-n12 firmware
- Weakness
- CWE-352
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.