⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2017-8877

CWE-200 — Information Exposure4 documents4 sources
Severity
6.5MEDIUM
EPSS
0.3%
top 50.74%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
1
Asus Rt-ac1750 Firmware
Timeline
PublishedMay 10
Latest updateMay 17

Description

ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDasus/rt-ac1750_firmware3.0.0.4.380.7266

🔴Vulnerability Details

3
GHSA
GHSA-jm4f-5pmm-4gwq: ASUS RT-AC* and RT-N* devices with firmware through 3↗2022-05-17
▶
CVEList
CVE-2017-8877: ASUS RT-AC* and RT-N* devices with firmware through 3↗2017-05-10
▶
VulnCheck
ASUS rt-ac1750_firmware Exposure of Sensitive Information to an Unauthorized Actor↗2017
▶
CVE-2017-8877 (MEDIUM CVSS 6.5) | ASUS RT-AC* and RT-N* devices with | cvebase.io