ID de Prueba:	1.3.6.1.4.1.25623.1.0.903432
Categoría:	Web application abuses
Título:	ASUS Router Multiple Vulnerabilities
Resumen:	ASUS Router is prone to multiple vulnerabilities.
Descripción:	Summary: ASUS Router is prone to multiple vulnerabilities. Vulnerability Insight: - The error page is accessible without authentication. This allows the attacker to bypass same-origin policy restrictions enforced by XMLHttpRequest. - The router error page 'error_page.htm' includes the current administrative password in clear text. Vulnerability Impact: Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site and also can conduct phishing attacks. Affected Software/OS: - ASUS RT-N16 - ASUS RT-N10U, firmware 3.0.0.4.374_168 - ASUS RT-N56U, firmware 3.0.0.4.374_979 - ASUS DSL-N55U, firmware 3.0.0.4.374_1397 - ASUS RT-AC66U, firmware 3.0.0.4.374_2050 - ASUS RT-N15U, firmware 3.0.0.4.374_16 - ASUS RT-N53, firmware 3.0.0.4.374_311 Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1437 BugTraq ID: 72369 http://www.securityfocus.com/bid/72369 Bugtraq: 20150129 Reflected XSS vulnarbility in Asus RT-N10 Plus Router (Google Search) http://www.securityfocus.com/archive/1/534579/100/0/threaded Bugtraq: 20150129 Unauthenticated Reflected XSS vulnarbility in Asus RT-N10 Plus router (Google Search) http://www.securityfocus.com/archive/1/534580/100/0/threaded Bugtraq: 20150203 CVE-2015-1437 XSS In ASUS Router. (Google Search) http://www.securityfocus.com/archive/1/534612/100/0/threaded http://packetstormsecurity.com/files/130187/Asus-RT-N10-Plus-Cross-Site-Scripting.html XForce ISS Database: asus-rtn10-errorpage-xss(100563) https://exchange.xforce.ibmcloud.com/vulnerabilities/100563 XForce ISS Database: asus-rtn10-resultstatus-xss(100566) https://exchange.xforce.ibmcloud.com/vulnerabilities/100566
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.