CVE-2017-5891

—

CVSS 3.0

8.8 high

EPSS

<1%p40

Published

May 10, 2017 (May 10, 2017)

Modified

Jun 17, 2026

Description

ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF.

Vendors: asus
Products: rt-ac1750 firmware
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news2 stories

Patch your Asus RT wireless routers now to avoid ugly surprises

Security AffairsMay 11, 15:09 UTC · May 11, 2017Vulnerability CVE-2017-5891 CVE-2017-6547 CVE-2017-6549+1 CVEs

47

40 Asus RT routers open to attack through web interface vulnerabilities

Help Net SecurityMay 11, 00:00 UTC · May 11, 2017Vulnerability CVE-2017-5891 CVE-2017-5892

35