CVE-2018-17023

published 2018-09-13

CVE-2018-17023: Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the…

high 8.8 CVSS 3.0

AV N AC L PR N UI R S U C H I H A H

Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
asus	gt-ac5300_firmware	<= 3.0.0.4.384_32738	—

CWE-352