CVE-2014-7270

published 2015-02-01

CVE-2014-7270: Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware…

Priority P4 28 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ac56s_firmware	<= 3.0.0.4.376.3715	—
asus	rt-ac68u_firmware	<= 3.0.0.4.376.3715	—
asus	rt-ac87u_firmware	<= 3.0.0.4.378.3754	—
asus	rt-n56u_firmware	<= 3.0.0.4.376.3715	—
asus	rt-n66u_firmware	<= 3.0.0.4.376.3715	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-352