An authentication bypass vulnerability exists in the...
High severity
Unreviewed
Published
Jan 10, 2023
to the GitHub Advisory Database
•
Updated Jan 30, 2023
Description
Published by the National Vulnerability Database
Jan 10, 2023
Published to the GitHub Advisory Database
Jan 10, 2023
Last updated
Jan 30, 2023
An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to full administrative access to the device. An attacker would need to send a series of HTTP requests to exploit this vulnerability.
References