CVE-2011-4497

Published: Nov 21, 2011Modified: Apr 29, 2026

3.3

Vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 6.5 / Impact: 2.9

Source: NVD

Description

QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request.

Affected (5)

Products: Asus: Rt N56u, Rt N56u Firmware

Asus

2 products

Rt N56u

Rt N56u Firmware

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Asus Rt N56u	All versions
Asus Rt N56u Firmware	Up to 1.0.1.4
Asus Rt N56u Firmware	Version 1.0.0.9
Asus Rt N56u Firmware	Version 1.0.1.2
Asus Rt N56u Firmware	Version 1.0.1.3

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.kb.cert.org/vuls/id/200814

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/200814

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.