medium6.5
CVE-2018-14711
Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with s…
Impact
Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted URLs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Rt-Ac3200 Firmware | Version 3.0.0.4.382.50010 |