Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2017-15653

Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token by using a specific User-Agent string.

  • Published: Jan 31, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-15653
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
asus / asuswrt - 3.0.0.4.380.7743.x