ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack, and a user is tricked to log into the affected device through an unencrypted ('http') connection, the user's session may be hijacked.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 08:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN34232595/ - Third Party Advisory | |
| References | () https://www.asus.com/networking-iot-servers/wifi-routers/asus-wifi-routers/rt-ax3000/helpdesk_bios/?model2Name=RT-AX3000 - Product |
21 Jun 2023, 18:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* |
|
| First Time |
Asus
Asus rt-ax3000 Asus rt-ax3000 Firmware |
|
| References | (MISC) https://jvn.jp/en/jp/JVN34232595/ - Third Party Advisory | |
| References | (MISC) https://www.asus.com/networking-iot-servers/wifi-routers/asus-wifi-routers/rt-ax3000/helpdesk_bios/?model2Name=RT-AX3000 - Product | |
| CWE | CWE-319 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
13 Jun 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 10:15
Updated : 2024-11-21 08:01
NVD link : CVE-2023-31195
Mitre link : CVE-2023-31195
CVE.ORG link : CVE-2023-31195
JSON object : View
Products Affected
asus
- rt-ax3000
- rt-ax3000_firmware
CWE
CWE-319
Cleartext Transmission of Sensitive Information