Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2014-7270

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

  • Published: Feb 1, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-7270
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
asus / rt-n66u_firmware - 3.0.0.4.376.3715.x
asus / rt-n56u_firmware - 3.0.0.4.376.3715.x
asus / rt-ac87u_firmware - 3.0.0.4.378.3754.x
asus / rt-ac68u_firmware - 3.0.0.4.376.3715.x
asus / rt-ac56s_firmware - 3.0.0.4.376.3715.x