CVE-2017-14698
First published: Mon Jan 29 2018(Updated: )
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Asus Dsl-ac51 Firmware | ||
| ASUS DSL-AC51 | ||
| Asus Dsl-ac52u Firmware | ||
| Asus Dsl-ac52u | ||
| Asus Dsl-ac55u Firmware | ||
| Asus Dsl-ac55u | ||
| Asus Dsl-n55u C1 Firmware | ||
| Asus Dsl-n55u C1 | ||
| Asus Dsl-n55u D1 Firmware | ||
| Asus Dsl-n55u D1 | ||
| Asus Dsl-ac56u Firmware | ||
| Asus Dsl-ac56u | ||
| Asus Dsl-n10 C1 Firmware | ||
| Asus Dsl-n10 C1 | ||
| Asus Dsl-n12u C1 Firmware | ||
| Asus Dsl-n12u C1 | ||
| Asus Dsl-n12e C1 Firmware | ||
| Asus Dsl-n12e C1 | ||
| Asus Dsl-n14u Firmware | ||
| Asus Dsl-n14u | ||
| Asus Dsl-n14u-b1 Firmware | ||
| Asus DSL-N14U-B1 | ||
| Asus Dsl-n16 Firmware | ||
| Asus Dsl-n16 | ||
| Asus Dsl-n16u Firmware | ||
| Asus Dsl-n16u | ||
| Asus Dsl-n17u Firmware | ||
| ASUS DSL-N17U | ||
| Asus Dsl-n66u Firmware | ||
| Asus Dsl-n66u | ||
| Asus Dsl-ac750 Firmware | ||
| Asus Dsl-ac750 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this ASUS router vulnerability?
The vulnerability ID for this ASUS router vulnerability is CVE-2017-14698.
What is the severity of CVE-2017-14698?
The severity of CVE-2017-14698 is critical with a score of 9.8.
Which ASUS router models are affected by CVE-2017-14698?
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers are affected by CVE-2017-14698.
How can remote attackers exploit CVE-2017-14698?
Remote attackers can exploit CVE-2017-14698 by changing passwords of arbitrary users using the http_passwd parameter to mod_login.
Is there a fix available for CVE-2017-14698?
Yes, you can find the fix for CVE-2017-14698 on ASUS' official website.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/asus
- canonical/asus dsl-ac51 firmware
- canonical/asus dsl-ac51
- canonical/asus dsl-ac52u firmware
- canonical/asus dsl-ac52u
- canonical/asus dsl-ac55u firmware
- canonical/asus dsl-ac55u
- canonical/asus dsl-n55u c1 firmware
- canonical/asus dsl-n55u c1
- canonical/asus dsl-n55u d1 firmware
- canonical/asus dsl-n55u d1
- canonical/asus dsl-ac56u firmware
- canonical/asus dsl-ac56u
- canonical/asus dsl-n10 c1 firmware
- canonical/asus dsl-n10 c1
- canonical/asus dsl-n12u c1 firmware
- canonical/asus dsl-n12u c1
- canonical/asus dsl-n12e c1 firmware
- canonical/asus dsl-n12e c1
- canonical/asus dsl-n14u firmware
- canonical/asus dsl-n14u
- canonical/asus dsl-n14u-b1 firmware
- canonical/asus dsl-n14u-b1
- canonical/asus dsl-n16 firmware
- canonical/asus dsl-n16
- canonical/asus dsl-n16u firmware
- canonical/asus dsl-n16u
- canonical/asus dsl-n17u firmware
- canonical/asus dsl-n17u
- canonical/asus dsl-n66u firmware
- canonical/asus dsl-n66u
- canonical/asus dsl-ac750 firmware
- canonical/asus dsl-ac750