Asus Wl-330Nul Firmware vulnerabilities

4 known vulnerabilities affecting asus/wl-330nul_firmware.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2018-0647HIGHCVSS 8.8fixed in 3.0.0.462018-09-07

CVE-2018-0647 [HIGH] CWE-352 CVE-2018-0647: Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allo Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVE-2015-7788HIGHCVSS 7.3≤ 3.0.0.412015-12-30

CVE-2015-7788 [HIGH] CWE-264 CVE-2015-7788: ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitra ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors.

CVE-2015-7790MEDIUMCVSS 6.1≤ 3.0.0.412015-12-30

CVE-2015-7790 [MEDIUM] CWE-79 CVE-2015-7790: Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0. Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2015-7787MEDIUMCVSS 4.3≤ 3.0.0.412015-12-30

CVE-2015-7787 [MEDIUM] CWE-200 CVE-2015-7787: ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WP ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors.