Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2017-14699

Published: 29/01/2018 Updated: 22/02/2018
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Subscribe to Dsl-ac51 Firmware

Vulnerability Summary

Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote authenticated users to read arbitrary files via a crafted DTD in (1) an UPDATEACCOUNT or (2) a PROPFIND request.

Vulnerable Product Search on Vulmon Subscribe to Product

asus dsl-ac51_firmware -

asus dsl-ac52u_firmware -

asus dsl-ac55u_firmware -

asus dsl-n55u_c1_firmware -

asus dsl-n55u_d1_firmware -

asus dsl-ac56u_firmware -

asus dsl-n10_c1_firmware -

asus dsl-n12u_c1_firmware -

asus dsl-n12e_c1_firmware -

asus dsl-n14u_firmware -

asus dsl-n14u-b1_firmware -

asus dsl-n16_firmware -

asus dsl-n16u_firmware -

asus dsl-n17u_firmware -

asus dsl-n66u_firmware -

asus dsl-ac750_firmware -

References

CWE-611https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook