Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token by using a specific User-Agent string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Asus asuswrt HTTPd服务器安全漏洞
Vulnerability Description
Asus asuswrt是华硕（ASUS）公司的一套运行在Asus路由器中的固件。HTTPd server是其中的一个HTTP服务器。 Asus asuswrt 3.0.0.4.380.7743及之前版本中的HTTPd服务器存在安全漏洞，该漏洞源于程序没有充分的验证已登录用户的IP。攻击者可利用该漏洞绕过IP验证机制，执行任意操作。
CVSS Information
N/A
Vulnerability Type
N/A