8.8
CVSSv3

CVE-2016-6557

Published: 13/07/2018 Updated: 09/10/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

asus rp-ac52_firmware

asus ea-n66_firmware -

asus rp-n12_firmware -

asus rp-n14_firmware -

asus rp-n53_firmware -

asus rp-ac56_firmware -

asus wmp-n12_firmware -