Description
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ASUS DSL-N17U
Default version status: unaffected
earlier to < 1.1.2.3_792affected
ASUS DSL-N55U_C1
Default version status: unaffected
earlier to < 1.1.2.3_792affected
ASUS DSL-N55U_D1
Default version status: unaffected
earlier to < 1.1.2.3_792affected
ASUS DSL-N66U
Default version status: unaffected
earlier to < 1.1.2.3_792affected
ASUS DSL-N12U_C1
Default version status: unaffected
earlier to < 1.1.2.3_807affected
ASUS DSL-N12U_D1
Default version status: unaffected
earlier to < 1.1.2.3_807affected
ASUS DSL-N14U
Default version status: unaffected
earlier to < 1.1.2.3_807affected
ASUS DSL-N14U_B1
Default version status: unaffected
earlier to < 1.1.2.3_807affected
ASUS DSL-N16
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-AC51
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-AC750
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-AC52U
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-AC55U
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-AC56U
Default version status: unaffected
earlier to < 1.1.2.3_999affected
ASUS DSL-N10_C1
Default version status: unaffected
Allaffected
ASUS DSL-N10_D1
Default version status: unaffected
Allaffected
ASUS DSL-N10P_C1
Default version status: unaffected
Allaffected
ASUS DSL-N12E_C1
Default version status: unaffected
Allaffected
ASUS DSL-N16P
Default version status: unaffected
Allaffected
ASUS DSL-N16U
Default version status: unaffected
Allaffected
ASUS DSL-AC52
Default version status: unaffected
Allaffected
ASUS DSL-AC55
Default version status: unaffected
Allaffected