CVE-2020-29656
High
Description
An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be easy" manner via an unspecified "public exploit."
SeverityHigh
CVSS7.5
Exploit probability—
ProductAsus Rt-ac88u Firmware
PublishedDec 9, 2020
First seenDec 9, 2020
How to fix
Update
- asus rt-ac88u_firmware3.1.0.108 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asus rt-ac88u_firmware | v < 3.1.0.108 | 3.1.0.108 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.