CVE-2013-7293 in WL-330NUL

Resumen

por MITRE

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traffic by controlling the server associated with that hostname.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 2014-01-14
• Divulgación: 2014-01-15
• Moderación: aceptado
• Artículo: VDB-66082
• CPE: listo
• CWE: CWE-16 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.01101
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-7293
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-7293
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-7293/