Unrated severityNVD Advisory· Published Feb 1, 2015· Updated May 6, 2026

CVE-2014-7270

Description

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected products

Asus/Rt N66u Firmware
cpe:2.3:o:asus:rt-n66u_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0.4.376.3715
Asus/Rt N66u
cpe:2.3:h:asus:rt-n66u:-:*:*:*:*:*:*:*
Asus/Rt N56u Firmware
cpe:2.3:o:asus:rt-n56u_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0.4.376.3715
Asus/Rt N56u
cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*
Asus/Rt Ac87u Firmware
cpe:2.3:o:asus:rt-ac87u_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0.4.378.3754
Asus/Rt Ac87u
cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:*
Asus/Rt Ac68u Firmware
cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0.4.376.3715
Asus/Rt Ac68u
cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*
Asus/Rt Ac56s Firmware
cpe:2.3:o:asus:rt-ac56s_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0.4.376.3715
Asus/Rt Ac56s
cpe:2.3:h:asus:rt-ac56s:-:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jvn.jp/en/jp/JVN32631078/index.htmlnvdVendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000012nvdVendor Advisory
www.asus.com/jp/News/PNzPd7vkXtrKWXHRnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000