CVE-2017-14698

—

CVSS 3.0

9.8 critical

EPSS

1%p68

Published

Jan 29, 2018 (Jan 29, 2018)

Modified

Jun 17, 2026

Description

ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp.

Vendors: asus
Products: dsl-ac51 firmware, dsl-ac52u firmware, dsl-ac55u firmware, dsl-n55u c1 firmware, dsl-n55u d1 firmware, dsl-ac56u firmware, dsl-n10 c1 firmware, dsl-n12u c1 firmware, dsl-n12e c1 firmware, dsl-n14u firmware, dsl-n14u-b1 firmware, dsl-n16 firmware
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.