ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

Bugtraq ID:	66954
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 14 2014 12:00AM
Updated:	Apr 14 2014 12:00AM
Credit:	David Longenecker
Vulnerable:
Not Vulnerable:

ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

ASUS RT-Series router are prone to an information-disclosure vulnerability that exposes sensitive information.

Successful exploits will allow unauthenticated attackers to obtain sensitive information of the device, which may aid in further attacks.

ASUS RT-Series running firmware versions prior to 3.0.0.4.374.5517 are vulnerable.

ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

References:

• Vendor Homepage (ASUS)