CVE-2014-7270 - CVE House
Back to Database
Status published Medium CVE-2014-7270

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-7270

Credits & Attribution

No credits recorded in the NVD database.

References

More from asus

View All →
CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does...
Unknown 0
CVE-2022-42455
ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by...
Unknown 0
CVE-2022-36439
AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers...
Unknown 0
CVE-2022-36438
AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file...
Unknown 0
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready...
High 7.8

Affected Vendor

Affected Software

rt-n66u firmware, rt-n66u, rt-n56u firmware, rt-n56u, rt-ac87u firmware, rt-ac87u, rt-ac68u firmware, rt-ac68u, rt-ac56s firmware, rt-ac56s
Vulnerable Versions:
0

Timeline

Official Publish: February 1st, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.