CVE-2020-29656

—

CVSS 3.1

7.5 high

EPSS

1%p63

Published

Dec 9, 2020 (Dec 9, 2020)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be easy" manner via an unspecified "public exploit."

Vendors: asus
Products: rt-ac88u firmware
Weakness: CWE-425
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.