Asus RP-AC52 up to 1.0.1.1s Web Interface Request cross-site request forgery

Summaryinfo

A vulnerability was found in Asus RP-AC52 up to 1.0.1.1s. It has been declared as critical. This affects an unknown part of the component Web Interface. Such manipulation as part of Request leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2016-6557. The attack can be launched remotely. No exploit exists. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability was found in Asus RP-AC52 up to 1.0.1.1s and classified as critical. Affected by this issue is some unknown processing of the component Web Interface. The manipulation as part of a Request leads to a cross-site request forgery vulnerability. Using CWE to declare the problem leads to CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. Impacted is confidentiality, integrity, and availability. CVE summarizes:

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

The bug was discovered 10/17/2016. The weakness was disclosed 07/13/2018 by Ian Smith as confirmed advisory (CERT.org). The advisory is available at kb.cert.org. This vulnerability is handled as CVE-2016-6557 since 08/03/2016. The attack may be launched remotely. No form of authentication is required for exploitation. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available.

The vulnerability was handled as a non-public zero-day exploit for at least 634 days. During that time the estimated underground price was around $0-$5k.

Applying a patch is able to eliminate this problem.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 93596†). The entry VDB-121443 is pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Asus

Name

• RP-AC52

Version

• 1.0.1.1a
• 1.0.1.1b
• 1.0.1.1c
• 1.0.1.1d
• 1.0.1.1e
• 1.0.1.1f
• 1.0.1.1g
• 1.0.1.1h
• 1.0.1.1i
• 1.0.1.1j
• 1.0.1.1k
• 1.0.1.1l
• 1.0.1.1m
• 1.0.1.1n
• 1.0.1.1o
• 1.0.1.1p
• 1.0.1.1q
• 1.0.1.1r
• 1.0.1.1s

License

• commercial

Website

• Vendor: https://www.asus.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion