CVE-2019-11060: HG100 contains an Uncontrolled Resource Consumption vulnerability
The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11060?
CVE-2019-11060 is classified as a high severity vulnerability due to its potential to cause a Denial of Service (DoS) through resource exhaustion.
How do I fix CVE-2019-11060?
To fix CVE-2019-11060, upgrade the ASUS HG100 firmware to a version later than 1.05.12 that addresses this vulnerability.
What types of attacks can exploit CVE-2019-11060?
CVE-2019-11060 can be exploited through Slowloris style attacks, which involve sending slow requests to consume server resources.
Which devices are affected by CVE-2019-11060?
CVE-2019-11060 affects ASUS HG100 devices running firmware versions up to and including 1.05.12.
Is CVE-2019-11060 easy to exploit?
Yes, CVE-2019-11060 is relatively easy to exploit for attackers with minimal skills, as it only requires the ability to send HTTP headers slowly.