Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAsus Rt Ac66u
HWAsusall versionsAsus Rt Ac66u Firmware
OSAsusall versionsAsus Rt N56u
HWAsusall versionsAsus Rt N56u Firmware
OSAsusall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
Related vulnerabilities
CVE-2018-20334CRITICAL9.8PL ✓same product
Command injection w ASUSWRT przez parametr fb_email — przejęcie kontroli nad routerem
CVE-2018-8879CRITICAL9.8PL ✓same product
Stack-based buffer overflow w firmware ASUS RT-AC66U umożliwiający RCE
CVE-2018-8826CRITICAL9.8PL ✓same product
RCE w routerach ASUS RT-Series — zdalne wykonanie kodu bez uwierzytelnienia
CVE-2018-9285CRITICAL9.8PL ✓same product
Command injection w routerach ASUS – zdalne wykonanie poleceń OS
CVE-2013-4659CRITICAL9.8PL ✓same product
Buffer overflow w Broadcom ACSD umożliwiający zdalne wykonanie kodu