ASUS Routers Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of certain ASUS router models. This vulnerability allows actions to be performed with the privileges of an authenticated user on the affected device, including executing system commands through unintended channels. The vulnerability affects ASUS routers running firmware versions 3.0.0.6_102 and earlier.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of an authenticated user, potentially allowing for the execution of system commands on the affected router.

Remediation

Users can update their routers to the latest firmware version to address this vulnerability. Instructions for updating the firmware can be found on the ASUS Support website.