CVE-2023-31195 - CVE House
Back to Database
Status published Unknown CVE-2023-31195

ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive...

Vulnerability Description

ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack, and a user is tricked to log into the affected device through an unencrypted ('http') connection, the user's session may be hijacked.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-31195

Credits & Attribution

No credits recorded in the NVD database.

References

More from ASUSTeK COMPUTER INC.

View All →
CVE-2023-47678
An improper access control vulnerability exists in RT-AC87U all versions....
Unknown 0

Affected Vendor

ASUSTeK COMPUTER INC.

View all reports →

Affected Software

ASUS Router RT-AX3000
Vulnerable Versions:
Firmware versions prior to 3.0.0.4.388.23403

Timeline

Official Publish: June 13th, 2023
Last Modified: January 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.