RSS   Vulnerabilities for 'Rp-ac56 firmware'   RSS

2018-07-13
 
CVE-2016-6558

CWE-77
 

 
A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The action_script parameter specifies a script to be executed if the action_mode parameter does not contain a valid state. If the input provided by action_script does not match one of the hard coded options, then it will be executed as the argument of either a system() or an eval() call allowing arbitrary commands to be executed.

 
 
CVE-2016-6557

CWE-352
 

 
In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

 

 >>> Vendor: ASUS 91 Products
Video security online
Remote console
Control center
Smartlogon
Asus wl-330ge
Asus wl-500w
Rt-n56u firmware
Rt-n56u
Ipswcom activex component
Net4switch
Rt-ac66u
Rt-n14u
Rt-n16u
Rt-n65u
Rt-n66u
Rt-ac66u firmware
Rt-n14u firmware
Rt-n16 firmware
Rt-n65u firmware
Rt-n66u firmware
Rt-n10e
Rt-n10e firmware
Wl-330nul
Rt-ac68u
Rt-ac68u firmware
Rt firmware
Rt series firmware
Wrt firmware
Rt-ac56s
Rt-ac87u
Rt-ac56s firmware
Rt-ac87u firmware
Rt-n10+d1 firmware
Rt-g32 firmware
Tm-1900
Wl-330nul firmware
Wl-33nul firmware
Tm-ac1900 firmware
Rt-ac53 firmware
Rt-ac1750 firmware
Rt-ac1200 firmware
Rt-ac3200 firmware
Rt-ac55u firmware
Rt-ac58u firmware
Rt-ac51u firmware
Dsl-n10s firmware
Asuswrt-merlin
Asuswrt
Dsl-ac51 firmware
Dsl-ac52u firmware
Dsl-ac55u firmware
Dsl-ac56u firmware
Dsl-ac750 firmware
Dsl-n10 c1 firmware
Dsl-n12e c1 firmware
Dsl-n12u c1 firmware
Dsl-n14u-b1 firmware
Dsl-n14u firmware
Dsl-n16 firmware
Dsl-n16u firmware
Dsl-n17u firmware
Dsl-n55u c1 firmware
Dsl-n55u d1 firmware
Dsl-n66u firmware
Rt-ac2900 firmware
Rt-ac52u b1 firmware
Rt-ac55uhp firmware
Rt-ac86u firmware
Rt-acrh13 firmware
Rt-n12 d1 firmware
Rt-n600 firmware
Ea-n66 firmware
Rp-ac52 firmware
Rp-ac56 firmware
Rp-n12 firmware
Rp-n14 firmware
Rp-n53 firmware
Wmp-n12 firmware
Hg100 firmware
Gt-ac5300 firmware
Zenfone 3 max firmware
Aura sync firmware
Zenfone v live firmware
Smarthome
Precision touchpad
Asus firmware
Aura sync
Gputweak ii
Armoury crate lite service
Rog live service
Myasus


Copyright 2024, cxsecurity.com

 

Back to Top