ASUS RT-N10E Wireless Router 'QIS_finish.htm' Password Information Disclosure Vulnerability

Bugtraq ID:	62850
Class:	Design Error
CVE:	CVE-2013-3610
Remote:	Yes
Local:	No
Published:	Oct 04 2013 12:00AM
Updated:	Oct 04 2013 12:00AM
Credit:	Sanket Karalkar
Vulnerable:
Not Vulnerable:

ASUS RT-N10E Wireless Router 'QIS_finish.htm' Password Information Disclosure Vulnerability

ASUS RT-N10E wireless router is prone to an information-disclosure vulnerability that exposes sensitive information.

Successful exploits will allow unauthenticated attackers to obtain sensitive information of the device such as administrative password, which may aid in further attacks.

ASUS RT-N10E firmware version 2.0.0.24 is vulnerable.

ASUS RT-N10E Wireless Router 'QIS_finish.htm' Password Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

ASUS RT-N10E Wireless Router 'QIS_finish.htm' Password Information Disclosure Vulnerability

References:

• ASUS Homepage (ASUS)
  
• ASUS RT-N10E Wireless Router vulnerable to authentication bypass (JPCERT)
  
• RT-N10E Wireless Router Homepage (ASUS)