CVE-2020-15498: Medium severity asus rt-ac1900p firmware vulnerability
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-15498?
CVE-2020-15498 is a vulnerability found in ASUS RT-AC1900P routers before version 3.0.0.4.385_20253.
What is the severity of CVE-2020-15498?
CVE-2020-15498 has a severity rating of 5.9, which is considered medium.
How does CVE-2020-15498 affect ASUS RT-AC1900P routers?
CVE-2020-15498 allows an arbitrary server certificate to be accepted for a firmware update, potentially leading to unauthorized access or malicious firmware installation.
Is ASUS RT-AC1900P router vulnerable to CVE-2020-15498?
ASUS RT-AC1900P routers before version 3.0.0.4.385_20253 are vulnerable to CVE-2020-15498.
How can CVE-2020-15498 be fixed?
To fix CVE-2020-15498, update the ASUS RT-AC1900P router to version 3.0.0.4.385_20253 or later.